Lead - Network & Network Security

Key Responsibilities :

1. Data Center, Campus and Sites Networking

• Own network architecture for data centers, corporate campuses and sites (IT +OT)
• Manage core, distribution and access switching infrastructure.
• Plan technology refresh for network equipment for IT and OT
• Design resilient architecture using redundant devices, links, power and connectivity paths.
• Plan structured cabling, fiber infrastructure, racks and network-room requirements.

2. Projects & Technology Transformation

• Lead campus, Data-Center, SD-WAN/WAN, Wi-Fi, firewall, cloud-connectivity, segmentation and Zero Trust modernization.
• Prepare technical designs, bills of material, implementation plans and migration strategies.
• Conduct Proofs of Concept and evaluate emerging network and security technologies (and supporting CEA guidelines)
• Perform technical review and validation of partner and vendor solutions.

3. Network Security & Zero Trust

• Manage firewalls, secure Internet access, network segmentation, VPN and Zero Trust Network Access technologies.
• Own and optimize Zscaler ZIA/ZPA services, policies and connectivity architecture.
• Work with Cybersecurity and SOC teams on network security events, vulnerabilities and threat mitigation for IT and OT.
• Ensure appropriate segmentation between user, server, data-center, OT/SCADA and Internet zones.
• Periodically review firewall rules, security policies and network access configurations.

4. Enterprise Network Operations

• Own and manage enterprise LAN, WAN, SD-WAN, MPLS, Internet, Wi-Fi and data-center networking covering IT and OT
• Maintain network resilience across business locations for IT and OT
• Manage routers, switches, wireless infrastructure, network segmentation and related connectivity services.
• Drive network architecture standardization across corporate and manufacturing locations.

5. Network Availability & Performance

• Target at least 99.5% availability for critical/head-office network infrastructure and at least 99% for distributed locations, with continuous improvement toward higher availability.
• Implement proactive monitoring and alerting network devices and connectivity, covering bandwidth utilization, latency, packet loss and availability.
• Review bandwidth utilization and capacity trends, investigate recurring threshold breaches and drive performance improvements across business locations.
• Establish dashboards and monthly service performance reports.

6. Incident, Problem & Change Management

• Lead resolution of P1/P2 network and network-security incidents.
• Perform impact analysis before major network changes and coordinate planned downtime with stakeholders.
• Ensure Root Cause Analysis for major incidents is completed, normally within two working days.
• Drive problem management for recurring issues and comply with ITSM change-management processes.

7. Vendor & SLA Management

• Manage OEMs, telecom providers, system integrators and managed-service partners.
• Monitor SLA performance and drive corrective actions for recurring service issues.
• Review ISP, MPLS and SD-WAN circuit performance and coordinate OEM TAC escalation for critical incidents.
• Participate in commercial and technical evaluations of networking technologies and services.

8. Governance, Audit & Documentation

• Maintain network diagrams, IP records, asset inventory, configuration standards, SOPs and troubleshooting documents.
• Support internal and external audits with required network and security evidence.
• Ensure configuration backups, version control and lifecycle tracking for critical devices.
• Maintain end-of-life/end-of-support visibility and a technology-refresh roadmap.

Technical Skills

• Cisco Catalyst and enterprise switching/routing
• LAN/WAN, VLAN, STP, HSRP/VRRP, routing protocols and QoS
• SD-WAN, MPLS and enterprise Wi-Fi architectures
• Firewalls, VPN, network segmentation and secure remote access
• Zscaler ZIA and ZPA
• DNS, DHCP, IPAM and related network services
• Network monitoring and performance-management tools
• Data-center networking and Microsoft Azure networking fundamentals
• Network automation and configuration management

Preferred Certifications

• CCNP Enterprise or CCNP Security
• Cisco Certified Specialist credentials
• Zscaler ZIA/ZPA certification
• Fortinet FCP/FCSS or equivalent firewall certification
• Microsoft Azure networking certification
• ITIL 4 Foundation