Network Security Engineer at Fosad Consulting

Description

• We are seeking a Network Engineer to join the Group Infrastructure Network team based in Kenya. The Network team are collectively responsible for designing, deploying, managing, and operating the Network and Network Security infrastructure platform that provides a stable, safe, and secure environment for hosted applications, workloads, and external clients.

Key Responsibilities

• You will provide technical support for network devices and be accountable for availability, performance, security, and risks related to all network devices & services.

Network Infrastructure Management:

• Managing and maintaining site-to-site VPN, IPSEC & MPLS, from Cloud to On-Prem customer network.
• Performs security reviews and risk assessments on the network, computer, and data systems.
• Ensuring the cloud network is responsive to user demands.
• Scaling cloud services to serve growing businesses.
• Troubleshooting issues which arise.
• Ensuring compliance with relevant legislation and guidelines.
• Configure, monitor, and maintain routers, switches, wireless access points, NAC systems, and F5 LTM.
• Ensure network devices are operating efficiently and meeting performance requirements.
• Implement and enforce network policies and procedures to maintain network integrity and security.
• Conduct regular audits and assessments of network devices to identify vulnerabilities or areas for improvement.
• Firmware Upgrades and Patch Management.
• Coordinate with vendors to obtain recommended firmware versions for network devices.
• Perform firmware upgrades on routers, switches, wireless access points, NAC systems, and F5 LTM.
• Develop and maintain a patch management process to apply security patches in a timely manner.
• Test and validate firmware upgrades and patches in a lab environment before deploying them in production.

Bug Identification and Resolution:

• Collaborate with vendors to identify and troubleshoot firmware bugs in network devices.
• Analyze bug reports, system logs, and other sources of information to diagnose issues.
• Work closely with vendors to provide detailed bug reports and assist in their resolution.
• Validate and verify bug fixes to ensure they effectively address identified issues.

Network Security and Compliance:

• Implement and maintain network security measures to protect against unauthorized access and cyber threats.
• Monitor network traffic for suspicious activity and respond to security incidents.
• Ensure compliance with industry standards and regulatory requirements (e.g., PCI DSS, HIPAA).
• Conduct periodic security assessments and vulnerability scans of the network infrastructure.
• Documentation and Reporting:
• Maintain accurate and up-to-date documentation of network configurations, diagrams, and procedures.
• Prepare regular reports on network performance, security vulnerabilities, and firmware status.
• Create and maintain technical documentation, including standard operating procedures (SOPs) and guidelines.

Availability Management:

• Monitor and maintain network availability and uptime.
• Implement redundancy and failover mechanisms to minimize network downtime.
• Conduct regular audits and assessments to identify potential vulnerabilities and address them proactively.
• Collaborate with other IT teams to ensure high availability of network services.
• Maintain Networksecurity infrastructure environment in a challenging 24X7 environments.

Performance Management and Quality of Service:

• Monitor and analyze network performance metrics to identify bottlenecks and areas for improvement.
• Optimize network performance through bandwidth management, traffic shaping, and Quality of Service (QoS) policies.
• Recommend and implement enhancements to optimize network performance and ensure efficient resource utilization.
• Define performance management parameters for related services.
• Ensure the services exceed the defined performance levels.
• Review performance on a regularly and ensure proactive actions and communication to avoid disruption to services.

Change and Configuration Management:

• Plan, implement, and document changes to network configurations as required.
• Follow change management processes and protocols to minimize disruptions and ensure smooth transitions.
• Maintain an accurate inventory of network devices, their configurations, and related documentation.
• Implement and maintain configuration management tools and practices.
• Ensure that Changes to applications are performed within the Architecture guidelines.

Incident and Problem Management:

• Investigate and resolve network incidents and problems in a timely manner.
• Conduct root cause analysis for recurring incidents and implement corrective actions.
• Provide support and troubleshooting expertise to resolve network-related issues.
• Collaborate with internal teams and vendors to address complex network problems.
• Provide first level support for incidents and problems related front end solutions.
• Ensure that incidents and problems do not impact the agreed service levels.
• Manage services from relevant vendors.
• Removing residual risk and providing solution that comply with ourpolicies.

License Management:

• Manage network equipment licenses, ensuring compliance with licensing agreements.
• Track license expiration dates and initiate renewal or procurement processes as needed.
• Maintain accurate license records and ensure proper documentation.

Disaster Recovery:

• Develop and maintain disaster recovery plans for network infrastructure.
• Test and validate network recovery procedures to ensure business continuity.
• Collaborate with the IT team to establish backup and recovery strategies for network devices.
• Participate in disaster recovery drills and exercises.

Education

• Bachelor’s Degree in engineering or computer Science.
• CCIE certifications in Routing & Switching

Required skills:

• Strong knowledge in capacity management and hardware sizing for cloud Network requirements.
• Good knowledge in cloud solution failover and maintain Disaster recovery plan.
• Good knowledge in TCP/IP and other routing protocols.
• Good knowledge of Cisco routers and Switches.
• Good knowledge in implementing and troubleshooting OSPF,BGP,EIGRP.
• Minimum 4 years of experience as a Network Engineer or in a similar role.
• In-depth knowledge of networking protocols, technologies, and best practices.
• Strong understanding of network security principles and practices.
• Proficiency in configuring and managing network devices, including routers, switches, firewalls, and load balancers.
• Experience with network monitoring and troubleshooting tools.
• Familiarity with network performance optimization techniques and QoS mechanisms.
• Excellent problem-solving skills and the ability to analyze and resolve complex network issues.