Network and Security Engineer

Reports To: IT Infrastructure and Security Lead

Job Purpose

To design, implement, manage, and maintain the organization's network infrastructure and security systems, ensuring high availability, optimal performance, data protection, and secure access to corporate resources. The role also ensures reliable network connectivity, protects IT assets against security threats, manages network incidents, and supports the implementation of infrastructure and cybersecurity initiatives.

Key Roles and Responsibilities

A. Network Infrastructure Management

· Design, configure, install, and maintain network infrastructure, including routers, switches, wireless access points, and firewalls.

· Monitor network performance, availability, and capacity to ensure reliable connectivity.

· Troubleshoot and resolve network issues, including LAN, WAN, WLAN, VPN, DNS, and DHCP.

· Manage VLANs, IP addressing, routing protocols, and network segmentation.

· Maintain network diagrams, IP address inventories, and configuration documentation.

· Perform network upgrades, firmware updates, and configuration backups.

· Coordinate with Internet Service Providers (ISPs) and third-party vendors to resolve connectivity issues.

· Manage all WIFI Access Points and troubleshoot technical issues where necessary.

B. Network Security Management

· Configure and maintain firewalls, security policies, access control lists (ACLs), and network security rules.

· Implement and manage VPN solutions for secure remote access and site-to-site connectivity.

· Monitor network traffic for suspicious activities, unauthorized access, and potential security threats.

· Implement network segmentation and access restrictions to protect critical systems.

· Manage intrusion detection and prevention systems (IDS/IPS), where applicable.

· Conduct periodic firewall rule reviews and remove obsolete or unnecessary access rules.

· Apply security patches and firmware updates to network and security devices.

· Investigate security incidents and implement corrective and preventive measures.

C. Cybersecurity and Access Control (In coordination with Security Officer)

· Implement and maintain security controls in line with organizational policies and industry best practices.

· Manage network access controls, authentication mechanisms, and administrative privileges.

· Support endpoint protection, antivirus, endpoint detection and response (EDR), and security monitoring solutions.

· Review system and network logs to identify potential security incidents.

· Support vulnerability assessments, remediation activities, and penetration-testing findings.

· Assist with security audits, risk assessments, and compliance requirements.

· Enforce the principle of least privilege and secure administrative access.

D. Monitoring and Incident Management

· Monitor network and security infrastructure using appropriate monitoring tools.

· Respond to network outages, connectivity issues, and security alerts.

· Perform root-cause analysis and implement permanent solutions to recurring issues.

· Escalate critical incidents to the appropriate technical teams or management.

· Maintain incident records, troubleshooting logs, and resolution reports.

· Participate in incident response activities and disaster recovery exercises.

· Ensure incidents are resolved within agreed service-level agreements (SLAs).

E. Network Maintenance, Backup, and Disaster Recovery

· Perform routine preventive maintenance on network and security equipment.

· Maintain backups of device configurations and security policies.

· Test configuration restoration and recovery procedures periodically.

· Coordinate with IT (Infrastructure and Operations) Team in business continuity and disaster recovery planning.

· Verify and regular testing of network redundancy, failover mechanisms, and high-availability configurations.

· Plan and execute infrastructure changes with minimal disruption to business operations

F. Documentation and Reporting

· Maintain accurate network topology diagrams and infrastructure documentation.

· Document firewall rules, VPN configurations, VLANs, IP schemes, and device inventories.

· Prepare monthly reports on network availability, incidents, performance, and security events.

· Maintain change-management records and implementation plans.

· Document standard operating procedures (SOPs) and troubleshooting guides.

· Provide recommendations for infrastructure improvements and security enhancements.

G. Project Implementation and Vendor Management

· Participate in network infrastructure upgrades, migrations, and new-site deployments.

· Evaluate network and security technologies based on business and technical requirements.

· Coordinate with vendors, service providers, and internal IT teams.

· Assist in procurement specifications, technical evaluations, and acceptance testing.

· Ensure projects follow approved security standards, budgets, and timelines.

H. User and Technical Support

· Provide technical support for network connectivity and secure access issues.

· Assist with VPN connectivity, Wi-Fi access, and network-related application problems.

· Collaborate with system administrators, cloud engineers, application teams, and helpdesk personnel.

· Provide technical guidance to junior IT staff and other support teams.

Required Technical Skills

· Routing and switching: TCP/IP, VLANs, OSPF, BGP, STP, DNS, and DHCP.

· Network security: Firewalls, ACLs, NAT, VPNs, IDS/IPS, and network segmentation.

· Security monitoring: SIEM tools, log analysis, and security incident investigation.

· Infrastructure: LAN, WAN, WLAN, and high-availability technologies.

· Operating environments: Windows Server, Linux, and cloud networking, where applicable.

· Tools: Network monitoring, packet capture, vulnerability scanning, and configuration management.

· Standards and frameworks: ISO 27001, NIST Cybersecurity Framework, and relevant organizational security policies.

· FortiGate Firewall: VPN, IPSEC, Routing, Internal Firewalling, SD-WAN, Firewall Rules

· Automation & Scripting: Using tools like Python, Ansible, or Terraform to automate repetitive provisioning, configuration backups, and routine maintenance tasks (NetDevOps).