Network Security Engineer

We are seeking a Network Engineer to join the Group Infrastructure Network team based in Kenya. The Network team are collectively responsible for designing, deploying, managing, and operating the Network and Network Security infrastructure platform that provides a stable, safe, and secure environment for hosted applications, workloads, and external clients.

You will provide technical support for network devices and be accountable for availability, performance, security, and risks related to all network devices & services.

Network Infrastructure Management:

Managing and maintaining site-to-site VPN, IPSEC & MPLS, from Cloud to On-Prem customer network.

Performs security reviews and risk assessments on the network, computer, and data systems.

Ensuring the cloud network is responsive to user demands.

Scaling cloud services to serve growing businesses.

Troubleshooting issues which arise.

Ensuring compliance with relevant legislation and guidelines.

Configure, monitor, and maintain routers, switches, wireless access points, NAC systems, and F5 LTM.

Ensure network devices are operating efficiently and meeting performance requirements.

Implement and enforce network policies and procedures to maintain network integrity and security.

Conduct regular audits and assessments of network devices to identify vulnerabilities or areas for improvement.

Firmware Upgrades and Patch Management.

Coordinate with vendors to obtain recommended firmware versions for network devices.

Perform firmware upgrades on routers, switches, wireless access points, NAC systems, and F5 LTM.

Develop and maintain a patch management process to apply security patches on time.

Test and validate firmware upgrades and patches in a lab environment before deploying them in production.

Bug Identification and Resolution:

Collaborate with vendors to identify and troubleshoot firmware bugs in network devices.

Analyze bug reports, system logs, and other sources of information to diagnose issues.

Work closely with vendors to provide detailed bug reports and assist in their resolution.

Validate and verify bug fixes to ensure they effectively address identified issues.

Network Security and Compliance:

Implement and maintain network security measures to protect against unauthorized access and cyber threats.

Monitor network traffic for suspicious activity and respond to security incidents.

Ensure compliance with industry standards and regulatory requirements (e.g., PCI DSS, HIPAA).

Conduct periodic security assessments and vulnerability scans of the network infrastructure.

Documentation and Reporting:

Maintain accurate and up-to-date documentation of network configurations, diagrams, and procedures.

Prepare regular reports on network performance, security vulnerabilities, and firmware status.

Create and maintain technical documentation, including standard operating procedures (SOPs) and guidelines.

Availability Management

Monitor and maintain network availability and uptime.

Implement redundancy and failover mechanisms to minimize network downtime.

Conduct regular audits and assessments to identify potential vulnerabilities and address them proactively.

Collaborate with other IT teams to ensure high availability of network services.

Maintain Network\security infrastructure environment in a challenging 24X7 environments.

Performance Management and Quality of service

Monitor and analyze network performance metrics to identify bottlenecks and areas for improvement.

Optimize network performance through bandwidth management, traffic shaping, and Quality of Service (QoS) policies.

Recommend and implement enhancements to optimize network performance and ensure efficient resource utilization.

Define performance management parameters for related services.

Ensure the services exceed the defined performance levels.

Review performance on a regularly and ensure proactive actions and communication to avoid disruption to services.

Change and Configuration Management

Plan, implement, and document changes to network configurations as required.

Follow change management processes and protocols to minimize disruptions and ensure smooth transitions.

Maintain an accurate inventory of network devices, their configurations, and related documentation.

Implement and maintain configuration management tools and practices.

Ensure that Changes to applications are performed within the Architecture guidelines.

Incident and Problem Management

Investigate and resolve network incidents and problems on time.

Conduct root cause analysis for recurring incidents and implement corrective actions.

Provide support and troubleshooting expertise to resolve network-related issues.

Collaborate with internal teams and vendors to address complex network problems.

Provide first level support for incidents and problems related to front-end solutions.

Ensure that incidents and problems do not impact the agreed service levels.

Manage services from relevant vendors.

Removing residual risk and providing solutions that comply with the NI policies.

License Management

Manage network equipment licenses, ensuring compliance with licensing agreements.

Track license expiration dates and initiate renewal or procurement processes as needed.

Maintain accurate license records and ensure proper documentation.

Disaster Recovery

Develop and maintain disaster recovery plans for network infrastructure.

Test and validate network recovery procedures to ensure business continuity.

Collaborate with the IT team to establish backup and recovery strategies for network devices.

Participate in disaster recovery drills and exercises.

Requirements

Education:

Bachelor’s degree in engineering or computer Science.

CCIE certifications in Routing & Switching

Required skills:

Strong knowledge in capacity management and hardware sizing for cloud Network requirements.

Minimum 4 years of experience as a Network Engineer or in a similar role.

In-depth knowledge of networking protocols, technologies, and best practices.

Strong understanding of network security principles and practices.

Proficiency in configuring and managing network devices, including routers, switches, firewalls, and load balancers.

Experience with network monitoring and troubleshooting tools.

Familiarity with network performance optimization techniques and QoS mechanisms.

Excellent problem-solving skills and the ability to analyze and resolve complex network issues.

Strong communication and collaboration skills to work effectively with cross-functional teams.

Cisco CCNP or CCIE certification is highly desirable.

Soft skills:

Excellent analytical and problem management skills.

Dedicated approach to providing a best-in-class service.

Excellent attention to detail and organizational skills.

Collaborative and team player.

Ability to anticipate issues successfully or challenges without being specifically directed.

Strong ability to meet target deadlines and manage time effectively.

Excellent written and oral communication skills in English.