Network Engineer (Hybrid Infrastructure & Cloud)

Job Purpose

Network and Security Operations

• Administer and maintain network and security infrastructure, including routers, switches, firewalls, and related services.
• Perform firmware upgrades, hotfixes, hardening, maintenance, and security configuration changes.
• Design and operate Azure hub-and-spoke connectivity with segmentation, secure routing, and controlled east-west traffic.
• Review security event logs, provide Level 2/3 support, troubleshoot incidents, and maintain system availability.
• Coordinate vulnerability assessments, penetration testing, security tools, policies, procedures, and compliance activities.

Cloud Management and Governance

• Design, implement, and maintain virtual networks, subnets, NSGs, route tables, VPN gateways, and ExpressRoute connectivity.
• Enforce IP addressing, segmentation, security zoning, network isolation, traffic control, and least-privilege connectivity models.
• Monitor cloud usage, optimize routing and bandwidth, and participate in resilient, scalable, and highly available cloud architecture reviews.

Managed Service Coordination

• Act as the technical focal point for providers supporting network operations, SOC, NOC, and security monitoring.
• Coordinate incident response, review performance reports, validate vendor changes, and ensure SLA and KPI compliance.
• Support vendor onboarding, knowledge transfer, technical documentation validation, service reviews, and escalation of operational risks.

Optimization and Troubleshooting

• Monitor LAN, WAN, and cloud connectivity performance, identify bottlenecks, and implement QoS, routing, and firewall optimizations.
• Perform root cause analysis, proactive health checks, security device optimization, capacity planning, disaster recovery testing, and resilience validation.

Collaboration and Documentation

• Collaborate with infrastructure, cloud, application, and information security teams on end-to-end network and security alignment.
• Maintain topology diagrams, firewall documentation, IP address records, cloud architecture diagrams, standard procedures, and audit evidence.
• Participate in CAB meetings, prepare technical risk assessments, and share knowledge with junior engineers and operations teams.

Essential Qualification

• Bachelor’s degree in computer science, information technology, network engineering, cybersecurity, or a related discipline.
• 7–10 years of experience in enterprise network and security environments, preferably in banking, financial services, or regulated industries.

Desirable Qualifications

• CCNA is described as mandatory or strongly preferred.
• CCNP and Fortinet NSE 4, NSE 5, NSE 7, or an equivalent firewall certification are advantageous.
• Strong enterprise networking, firewall, cloud networking, security monitoring, analytical, troubleshooting, documentation, communication, and on-call operations experience is expected.