Job Description: Network Engineer
Job Purpose:
To design, implement, optimise, and support enterprise network infrastructure using Cisco technologies, ensuring high availability, security, and performance across on-premises and hybrid environments.
Key Responsibilities:
Network Engineering and Architecture
•
Design and implement LAN/WAN, SD-WAN, and data centre network solutions and load balancers (Kemp).
•
Configure and maintain Cisco routers, switches, firewalls and FortiNet
•
Support hybrid cloud connectivity (AWS Direct Connect, VPN, MPLS, DIA)
•
Implement high availability designs (HSRP, VRRP, clustering, failover)
Network Operations
•
Monitor and optimise network performance and capacity
•
Manage QoS policies for voice, video, and critical applications
•
Perform firmware upgrades and lifecycle management
•
Analyse traffic flows and resolve bottlenecks
Security and Compliance
•
Implement network security controls (ACLs, IPSec VPNs, segmentation)
•
Configure Cisco Firepower / FortiGate firewalls
•
Ensure compliance with ISO 22301, ISO 27001, and internal governance standards
•
Conduct vulnerability assessments and remediation
•
Apply patches and updates.
•
Monitor for vulnerabilities and threats.
User and System Support
•
Provide 3rd level network support.
•
Resolve connectivity issues (LAN/Wi-Fi/VPN/WAN and VoIP).
Incident and Problem Management
•
Lead root cause analysis (RCA) on major network incidents
•
Resolve complex connectivity and performance issues
•
Provide escalation support from Network Administrators
•
Work with vendors (Cisco, ISPs, service providers)
Documentation
•
Maintain network architecture diagrams and standards
•
Develop SOPs, DR runbooks, and operational procedures
•
Support disaster recovery (DR) and business continuity (BCP) testing
•
Maintain accurate configuration and asset documentation
Skills & Competencies:
•
Core Networking
o
Advanced TCP/IP, subnetting, routing, switching
o
VLANs, trunking, STP, EtherChannel
o
Routing protocols: OSPF, EIGRP, BGP, ISIS, VXLAN
•
Cisco-Specific Skills
o
Cisco IOS, IOS-XE, NX-OS
o
Cisco Catalyst and Nexus switching
o
Cisco DNA Center and automation tools
o
Cisco ACI (advantageous)
•
Network Security
o
Firewall configuration (Cisco Firepower, FortiGate)
o
VPN technologies (IPSec, SSL VPN, site-to-site)
o
Network segmentation and Zero Trust principles
•
WAN & Connectivity
o
MPLS, SD-WAN, DIA, broadband failover
o
Load balancing and traffic engineering
o
QoS design and implementation
•
Monitoring & Tools
o
Network monitoring tools (e.g., SolarWinds, PRTG, CheckMK)
o
Packet analysis (Wireshark)
o
Configuration backup and automation tools
•
Automation & Scripting (Advantageous)
o
Python, Ansible, REST APIs
o
Infrastructure as Code (IaC) concepts
•
Soft Skills
o
Strong analytical and troubleshooting ability
o
Stakeholder engagement and vendor management
o
Documentation and reporting skills
o
Ability to work in high-pressure incident environments