Senior Network Security Engineer

This role involves designing, deploying, configuring, and maintaining enterprise network infrastructure encompassing LAN, WAN, WLAN, and data center environments. The candidate will be responsible for managing a variety of network devices such as routers, switches, wireless access points, and controllers, ensuring optimal performance and security. The position requires hands-on experience with network security solutions, VPN configurations, dynamic routing protocols, and network redundancy to support secure and reliable connectivity across multiple sites.

Key Responsibilities

- Design, deploy, configure, and maintain enterprise networks including LAN, WAN, WLAN, and data center infrastructures.
- Configure, manage, and troubleshoot routers, switches, wireless access points, wireless LAN controllers, and network management platforms.
- Implement network security solutions such as next-generation firewalls, security policies, NAT, access control lists, and threat prevention mechanisms.
- Configure and manage site-to-site IPsec VPNs and remote-access VPNs to ensure secure connectivity between branch offices, data centers, and remote users.
- Implement dynamic routing protocols including BGP and OSPF, VLANs, inter-VLAN routing, EtherChannels, link aggregation, and redundancy mechanisms.
- Perform firewall policy administration, security rule optimization, NAT configuration, and traffic-flow analysis to maintain secure communications.
- Manage firewall high availability (HA), failover, and redundancy configurations to support business continuity and minimize downtime.
- Conduct network monitoring, performance tuning, fault isolation, and root cause analysis to resolve complex connectivity and security incidents.
- Execute network infrastructure migrations, upgrades, configuration backups, software updates, and planned changes with minimal service disruption.
- Implement secure network access and authentication mechanisms such as RADIUS, TACACS+, 802.1X, and Active Directory integration.
- Configure and troubleshoot enterprise wireless networks including SSIDs, authentication, dynamic VLAN assignment, roaming, and centralized management.
- Maintain network security standards through access control enforcement, device hardening, firmware management, and vulnerability remediation.
- Develop and maintain comprehensive network documentation including design documents, network diagrams, IP addressing schemes, configuration records, and operational procedures.
- Collaborate with vendors, technical support teams, and stakeholders to resolve complex network and security issues.
- Provide technical support for enterprise infrastructure, ensuring service availability, security compliance, and adherence to change-management procedures.
- Work across different network platforms such as Cisco, Huawei, Fortinet, Palo Alto, and Sangfor depending on the deployed environment.

Required Qualifications

- Valid certifications such as CCNA, CCNP, or NSE-4.

No preferred qualifications or benefits were specified for this role.