Network Engineer

Operations Support Provide L2/L3 support for LAN/WAN, WiFi, and security incidents; drive root cause analysis and permanent fixes Manage and optimize Cisco routers/switches (OSPF/EIGRP, STP, VLANs, HSRP/VRRP, QoS) Administer Cisco WLC and enterprise WiFi (AP provisioning, RF optimization, WPA2/3Enterprise, 802 1X) Firewall Security Configure and maintain SonicWall and Fortinet (FortiGate) firewalls (NAT, VPN, SDWAN, policies, IPS/AV/WEB) Implement sitetosite and remoteaccess VPNs, certificate management, and high availability Tune security profiles (IPS, AntiVirus, Web Filter, Application Control) and monitor threat activity SSE / Cloud Security Operate Netskope (SWG, CASB, ZTNA/DLP policies), integrate with IdP (Azure AD/Okta), and onboard endpoints Analyze SSE logs/events; optimize policies for user experience and risk reduction Monitoring Reliability Maintain FortiAnalyzer, SonicWall Analytics Define and track SLAs/OLAs; drive capacity planning and performance baselines Change Compliance Lead changes via ITIL processes (Request/Change/Problem); maintain network diagrams and SOPs Ensure compliance with security standards (eg, ISO 27001, CIS Benchmarks) and audit readiness Collaboration Work with InfoSec, Workplace, Cloud, and App teams on new projects (MA, branch rollout, cloud migrations) Vendor coordination for complex issues, RMAs, and firmware advisories MustHave Skills Routing/Switching: VLAN, trunking, interVLAN, STP/RSTP, NAT, QoS Cisco WLC/WiFi: RF design basics, AP groups, FlexConnect/Local mode, RADIUS/802 1X, Fast Secure Roaming Firewalls SonicWall: Access rules, NAT, DPI, VPN (IKEv2), App Control, HA Fortinet: Policy/Objects, SDWAN, IPSec/SSLVPN, UTM profiles, HA (AA/AP), FortiManager/FortiAnalyzerDot Netskope: SWG, CASB, ZTNA, DLP, policy creation, client deployment, log analysis Security Foundations: TCP/IP, TLS/PKI, DNS/DHCP, identity-aware policies, segmentation (ACLs/VLANs) Scripting/Automation (nice-to-have): Python/PowerShell, REST APIs for device/report automation Tooling: Wireshark, Nmap, SolarWinds/PRTG, FortiAnalyzer, SonicWall Analytics, Certifications (Preferred) Cisco: CCNA (required or equivalent) Fortinet: NSE 4 (Firewall Professional) or higher (NSE 5/7 nice-to-have) SonicWall: SNSA/SNSP (preferred)Dot Netskope: NSA (Administrator) / NPA (preferred) Security ITSM: CompTIA Security+, ITIL Foundation