Network Engineer

REQUIRED SKILLS & COMPETENCIES •LAN and WAN — switching, VLAN management, trunking, Spanning Tree and layer 3 routing •Aruba switching — configuration, VLAN provisioning, port management and policy management •Firewall management — Fortinet FortiGate and MikroTik; policy creation, NAT and security profiles •VPN — SSL VPN and client VPN gateway configuration, profile management and monitoring •DNS, DHCP and IPAM — zone management, scope configuration and IP address lifecycle •Load balancing — rule configuration, health check management and listener lifecycle •Cloud networking — virtual networks, security groups, NSG, cloud VA firewall and routing •Cloud network virtual appliance firewalls — deployment, policy management and monitoring •Anti-DDoS — on-premises DDoS appliance and cloud-native DDoS mitigation management •Network monitoring — Cisco DNA Centre and Cisco Thousand Eyes for visibility and synthetic testing •QoS monitoring — quality of service configuration, monitoring and performance trend analysis •Network security support — posture monitoring, CVE patching and security policy compliance •Infrastructure as code — Terraform and Ansible for network configuration management •Performance and policy review — regular network performance analysis and policy optimisation KEY RESPONSIBILITIES •Design and manage LAN and WAN topology — Aruba switching, VLAN provisioning and layer 3 routing •Manage Fortinet and MikroTik firewall policies — rule lifecycle, NAT, CVE patching and security profiles •Configure and maintain SSL VPN and client VPN services; manage user profiles and monitor tunnel health •Manage DNS zones, DHCP scopes and IP address management across all environments •Configure and maintain load balancer rules, health checks and listener configuration •Manage cloud networking across all provider environments — security groups, routing and cloud VA firewalls •Operate and maintain anti-DDoS appliances and cloud DDoS mitigation services •Monitor network performance and availability using Cisco DNA and Cisco Thousand Eyes •Monitor QoS and conduct regular performance and policy reviews; produce trend analysis reports •Maintain network security posture; respond to security anomalies and policy violation alerts •Participate in the change advisory process for all network changes and maintain audit records •Maintain network documentation, configuration runbooks and topology diagrams •Provide Level 2/3 network incident support and coordinate with vendors where required