Network & Security Engineer

Job Description

Roles & Responsibilities Design, implement, and support enterprise-grade LAN, WAN, WLAN, and network security infrastructure across corporate offices, branch locations, and data center environments. Configure, deploy, and manage Aruba networking solutions including: o Aruba CX Core, Distribution, and Access Switches o Aruba Wireless Controllers o Aruba Access Points o Aruba Instant On Switching platforms Perform installation, configuration, and maintenance of Layer 2 and Layer 3 network services including: o VLAN Configuration o Inter-VLAN Routing o Static & Dynamic Routing o OSPF and BGP Routing Protocols o LACP Port Aggregation Manage and troubleshoot enterprise wireless infrastructure including: o SSID Configuration o RF Optimization o Wireless Roaming o Authentication & Encryption Policies o Wireless Performance Tuning o Access Point Provisioning and Monitoring Configure, administer, and support Fortinet FortiGate firewall infrastructure including: o Firewall Policies o NAT Configuration o IPSec & SSL VPN o Unified Threat Management (UTM) o Intrusion Prevention System (IPS) o Antivirus & Malware Protection o URL and Application Filtering o High Availability (HA) Configuration o Security Profiles and Access Control Policies Implement secure remote connectivity solutions for branch offices, remote users, and third-party connectivity using: o Site-to-Site VPN o Remote Access VPN o ZTNA / Secure Access Solutions Monitor and optimize network availability, utilization, performance, and reliability using network monitoring and logging tools. Perform proactive troubleshooting and root cause analysis for network outages, latency issues, wireless connectivity problems, firewall/security incidents, and ISP-related issues. Coordinate with telecom providers, ISPs, OEM vendors, and support partners for: o Incident Resolution o WAN Link Provisioning o Hardware Replacement o Escalation Management o RMA Activities Conduct firmware upgrades, patch management, configuration backup, and preventive maintenance activities for network and security devices. Ensure high availability and redundancy of critical network infrastructure by implementing resilient network architecture and failover mechanisms. Support network security initiatives by implementing and enforcing: o Access Control Policies o Network Segmentation o User Authentication Mechanisms o AAA Services (RADIUS/TACACS+) o Security Hardening Best Practices Manage IP addressing schemes, subnet planning, DHCP, DNS, and network capacity planning activities. Maintain accurate and up-to-date documentation including: o Network Topology Diagrams o Rack Layouts o IP Address Inventory o Device Configuration Backups o ISP and Circuit Details o SOPs, RCA Reports, and Change Records Participate in infrastructure rollout, migration, expansion, and technology refresh projects. Work closely with internal IT teams, application owners, security teams, and business stakeholders to ensure seamless delivery of network services. Provide L2/L3 technical support for network and security-related incidents and service requests within defined SLA timelines. Support implementation and troubleshooting of PoE-based infrastructure including wireless access points, IP phones, and connected edge devices. Assist in evaluating new technologies, products, and solutions to improve network performance, scalability, and security posture. Participate in change management processes including planning, risk assessment, implementation, and post-change validation. Generate operational reports related to: o Network Availability o Bandwidth Utilization o Security Events o Incident Trends o Capacity and Performance Metrics Ensure compliance with organizational IT policies, cybersecurity standards, and audit requirements. Provide remote support and guidance to field engineers and onsite teams during installations, troubleshooting, and maintenance activities. Be available for planned maintenance activities, critical issue handling, and 24x7 support coverage as part of operational requirements. Skills and Qualifications (Mandatory): Hands-on experience with Aruba Switching, Aruba Wireless, and Fortinet Firewalls. Strong knowledge of LAN, WAN, WLAN, routing, and switching technologies. Experience with Aruba Central, Forti Cloud, SD-WAN, and ZTNA solutions. Experience in network troubleshooting, monitoring, firmware upgrades, and patch management. Good documentation, analytical, and communication skills. Availability to support critical incidents and 24x7 operations when required. Skills and Qualifications (Good to have): Knowledge of network automation and scripting (Python, Ansible, PowerShell). Familiarity with monitoring tools like SolarWinds, PRTG, Zabbix, and Wireshark. Exposure to virtualization, data center networking, and multi-site environments. Relevant certifications preferred: Aruba, Fortinet, CCNA/CCNP, or ITIL.