Job
Description
The Network Engineer will be responsible for designing, securing, and maintaining the organization's network infrastructure, including firewalls (Sophos, Fortinet and Cisco), network security, cloud/hybrid networking. Key Responsibilities: Network Security & Firewall Management: Configure, manage, and monitor Sophos XG, Fortinet FortiGate and Cisco firewalls. Implement IPS/IDS, VPNs, Web Filtering, Application Control, and Threat Protection and End Point Security . Perform firewall rule audits, security hardening, and compliance enforcement . Network Infrastructure & Performance Optimization: Design and optimize LAN, WAN, VLANs, SD-WAN, and Wi-Fi networks . Configure and manage Layer 2/3 networking (Routing, Switching, OSPF, BGP, EIGRP) . Implement high-availability (HA), failover, and redundancy strategies . Troubleshoot network performance and connectivity issues . Cloud & Hybrid Networking: Configure and manage Azure networking (VNets, ExpressRoute, VPN Gateway, NSGs, Load Balancers) . Secure hybrid network integrations between on-premises and cloud environments . Implement Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) strategies. ISO 27000 Compliance & Security Best Practices: Ensure network security policies comply with ISO 27001, 27002, and 27005 . Implement information security risk management and mitigation strategies . Maintain security logs, incident response processes, and compliance documentation. Monitoring & Incident Response: Use network monitoring tools (PRTG, Wireshark, FortiAnalyzer, Sophos Central) . Respond to network security incidents and ensure high availability . Implement DDoS protection, intrusion detection/prevention (IDPS), and firewall event correlation . Team Collaboration, Training & Knowledge Sharing: Work as a team player and actively contribute to IT security and network discussions. Provide training, mentorship, and hands-on guidance to junior network engineers . Conduct technical workshops and knowledge-sharing sessions for the IT team. Documentation & Support: Maintain network diagrams, firewall policies, ISO compliance reports, and change logs . Required Skills & Qualifications: Education: Bachelor's degree in IT, Computer Science, or a related field. Certifications (Preferred): Fortinet NSE4/NSE7 Sophos XG Certified Engineer Cisco CCNP Security Experience: Minimum 5+ years in network security, firewall administration, and compliance. Technical Expertise: Firewalls: Sophos, Fortinet, Palo Alto, Cisco ASA/Firepower. Routing & Switching: VLANs, STP, QoS, OSPF, BGP, SD-WAN. Cloud Networking: Azure VNet, ExpressRoute, VPN Gateway. Network Security: ISO 27001 compliance, Zero Trust, SIEM, EDR, MFA, Identity-based security. Soft Skills: Strong team player with excellent collaboration skills. Ability to train, mentor, and support junior engineers . Strong problem-solving and analytical skills. Excellent communication and documentation abilities. Preferred Experience: Experience in Retail Sector
