Network Engineer

Role & responsibilities

Router Administration & WAN Management

• Design, deploy, and manage enterprise routers (Cisco, Juniper, or equivalent) across LAN, WAN, and SD-WAN environments
• Configure and maintain dynamic routing protocols including OSPF, EIGRP, and BGP for optimal path selection and redundancy
• Manage WAN connectivity including MPLS, leased lines, broadband, and SD-WAN overlays
• Implement and maintain QoS policies to prioritize business-critical traffic across WAN links
• Perform router hardening, IOS/firmware upgrades, and lifecycle management
• Troubleshoot routing issues, packet loss, and latency affecting network performance and application availability

Switch Administration & LAN Management

• Deploy, configure, and administer enterprise-grade switches (Cisco Catalyst, Nexus, or equivalent) in access, distribution, and core layers
• Design and manage VLAN architecture, trunking (802.1Q), and inter-VLAN routing to support network segmentation
• Configure and maintain spanning tree protocols (STP, RSTP, MSTP) to prevent loops and ensure redundancy
• Implement link aggregation (LACP/PAGP), port security, and storm control across the switching infrastructure
• Perform switch stack management, firmware upgrades, and hardware lifecycle activities
• Monitor switch performance, port utilization, and MAC address tables to proactively identify and resolve issues

Wireless Access Point Deployment & Management

• Deploy, configure, and manage enterprise Wireless Access Points (Cisco, Aruba, Meraki, or equivalent) across campus, branch, and remote sites
• Perform RF site surveys, channel planning, and transmit power optimization to ensure seamless wireless coverage
• Configure SSIDs, band steering, roaming policies (802.11r/k/v), and QoS for wireless clients
• Monitor AP health, client association metrics, and interference sources to maintain optimal wireless performance
• Perform firmware upgrades, configuration audits, and hardware replacement for access point lifecycle management
• Support high-density wireless deployments for conference rooms, auditoriums, and open-plan office environments

Wireless Controller Administration

• Administer and manage centralized Wireless LAN Controllers (WLC) and cloud-managed wireless platforms (Cisco WLC, Aruba Mobility Controller, or equivalent)
• Configure and maintain controller-based policies for mobility, roaming, load balancing, and client exclusion
• Manage WLAN profiles, RF groups, mobility groups, and guest access portals across controller clusters
• Implement and maintain wireless security policies including WPA3, 802.1X/EAP, certificate-based authentication, and NAC integration
• Perform controller software upgrades, redundancy failover testing, and disaster recovery validation
• Integrate wireless controllers with AAA platforms (RADIUS/TACACS+) and network management systems for centralized visibility

Firewall & Perimeter Security Administration

• Design, implement, and manage enterprise firewalls (Cisco ASA/FTD, Palo Alto, Fortinet, Check Point, or equivalent) for perimeter and internal segmentation
• Create and maintain firewall rule sets, security zones, NAT policies, and application-layer inspection policies
• Manage VPN configurations including site-to-site IPSec VPN and remote access VPN (SSL/TLS) for secure connectivity
• Implement and maintain Intrusion Prevention System (IPS) policies, URL filtering, and threat intelligence feeds
• Conduct periodic firewall rule base reviews, policy optimization, and compliance audits
• Respond to security events flagged by firewall logs, and coordinate with the SOC team for threat investigation and remediation

Cross-Functional Responsibilities

• Collaborate with security, server, cloud, and application teams to support end-to-end infrastructure initiatives
• Participate in architecture and design reviews for network modernization, data center, and cloud connectivity projects
• Establish and maintain network monitoring, alerting, and capacity planning using tools such as SolarWinds, PRTG, Grafana, or equivalent
• Lead network incident response, root cause analysis, and post-incident reviews to prevent recurrence
• Manage network change management processes in compliance with ITIL practices, ensuring minimal business disruption
• Document network topology, IP address management (IPAM), configuration standards, and operational runbooks

Preferred candidate profile