Senior Network Security Engineer

We are seeking a Senior Network & Security Engineer with 1015 years of hands-on experience to lead complex enterprise infrastructure projects. This 100% travel-based role requires on-site presence from project initiation through to handover. The ideal candidate will have deep expertise across networking, security, data center, voice, and storage technologies, with a strong ability to adapt to new tools and environments.

Roles and Responsibilities

• Network Design & Implementation: Design, install, and configure enterprise-grade network hardware including routers, switches (Cisco Nexus, Catalyst), and wireless access points.
• Performance Monitoring & Troubleshooting: Continuously monitor network performance, troubleshoot issues, and optimize throughput, latency, and reliability.
• Network Maintenance: Perform regular updates, patches, and configuration changes to ensure optimal security and functionality.
• Infrastructure Management: Manage and optimize network monitoring and alerting tools for proactive incident response.
• Documentation: Maintain detailed network diagrams, IP schemas, and configuration backups.
• Advanced Network Configurations: Implement VPNs, VLANs, QoS, routing protocols (OSPF, BGP, EIGRP), Layer 2/3 protocols (HSRP, VRF, STP, LACP, VXLAN).
• Data Center Engineering: Architect and deploy modern data center networks using Cisco Nexus 9000 series and Cisco ACI fabric, including advanced features like vPC, VDC, VXLAN EVPN.
• Security Integration: Work with firewalls (Palo Alto, Fortinet, Cisco ASA/Firepower), micro-segmentation strategies, and implement security best practices.
• Security Operations: Implement and manage firewalls, IDS/IPS, SIEM, and endpoint protection; monitor for threats and conduct incident response and vulnerability assessments.
• Collaboration & Support: Provide guidance to internal IT and DevOps teams, ensure secure CI/CD pipelines, and support secure system deployments.
• Application Delivery: Configure and maintain ADCs such as F5 BIG-IP (LTM, GTM, ASM), NGINX, HAProxy for traffic management, application performance tuning, and session persistence.
• VoIP Systems: Manage VoIP platforms (Cisco CUCM), SBCs, gateways, and voice policies; troubleshoot call flows using tools like Wireshark.
• Storage Networking: Design and support SAN environments using Cisco MDS 9000 switches, perform zoning and VSAN configuration, and manage storage arrays (NetApp, HPE).
• Security & Compliance: Conduct threat modeling, ensure compliance with frameworks (NIST, ISO 27001, MITRE ATT&CK), and maintain up-to-date documentation and audit trails.

Desired Skills/Background

• Experience: 10–15 years in enterprise networking and security roles with proven, hands-on implementation and support experience.
• Travel Requirement: 100% travel; must be available to remain at client sites for the full project duration.
• Technical Proficiency in Cisco Nexus, IOS-XE, NX-OS, ACI, Routing protocols (OSPF, BGP, EIGRP), VXLAN EVPN, VRF, HSRP, Firewalls: Palo Alto, Cisco ASA/Firepower, Fortinet, ADCs: F5 BIG-IP, HAProxy, NGINX, SIEM: Splunk, QRadar; IDS/IPS systems, VoIP technologies (CUCM, SIP, RTP, SCCP, dial-peers), SAN: Cisco MDS, Fibre Channel, NetApp ONTAP, HPE Primera
• Tools: Wireshark, VoIP monitoring, DDoS protection platforms
• Deep understanding of TCP/IP, security threats, DDoS, common network attack vectors
• Strong communication, problem-solving, and documentation skills
• Ability to quickly learn and integrate new technologies as required by client environments