About this role
Key Responsibilities
- Design, maintain and update network diagrams covering LAN/WAN topology, IP addressing, VLAN structures and connectivity across all sites.
- Document switch configurations, wireless SSIDs, access point layouts, firewall rules and routing tables.
- Plan and document network expansions for new offices, including structured cabling layouts, rack elevations and device placement.
- Configure, maintain and troubleshoot firewalls include but not limited to security rules, NAT, VPN tunnels, VLANs and WAF policies where applicable.
- Monitor firewall health, throughput and security logs, and respond promptly to incidents.
- Implement and maintain site-to-site and remote-access VPNs.
- Review firewall configurations and security policies on a regular schedule.
- Configure and maintain managed switches, including VLAN segmentation, trunking, port security, STP and link aggregation.
- Deploy, monitor and optimize enterprise wireless for coverage, availability and performance.
- Troubleshoot Layer 2 and Layer 3 connectivity, routing, switching and wireless issues.
- Monitor network performance and implement improvements.
- Manage server room operations: rack organization, structured cabling, power (UPS/PDU), cooling and physical access control.
- Monitor the health and availability of servers, switches, firewalls and other critical devices
- Run and verify scheduled backups (per company policy, and resolve backup failures promptly.
- Maintain network inventory, including asset tagging, warranty tracking and lifecycle management.
- Resolve network and infrastructure tickets within SLA timelines.
- Provide advanced (L2/L3) troubleshooting for connectivity, routing, switching, wireless, firewall and VPN issues.
- Support network connectivity for our telephony platform, including SIP trunk connectivity, firewall and NAT rules for voice traffic, and call-quality troubleshooting (jitter, packet loss, QoS).
- Coordinate with internal IT teams, vendors and ISPs on escalations and hardware replacements.
- Identify recurring problems and implement corrective and preventive measures.
- Apply critical network device patches and firmware updates within defined timelines.
- Conduct periodic access reviews for VPNs, network devices and remote-access services, and remove inactive or unauthorized accounts.
- Support IT security audits, risk assessments and compliance reporting for network and infrastructure operations.
- Follow security policies, change management procedures and documentation standards.
Required Qualifications & Experience
- Bachelor's degree in IT, Computer Science, Networking or a related field.
- 2-3 years of hands-on network engineering and infrastructure experience, with demonstrated depth in firewall administration, switching and wireless.
- Proven experience producing professional network diagrams in Visio, Draw.io or similar.
- Practical experience managing server rooms, including rack installation, structured cabling, power redundancy and cooling.
- Strong working knowledge of Fortinet, Sophos or equivalent UTM firewalls.
- Hands-on experience with managed switches and enterprise wireless access points (UniFi or equivalent).
- Solid grasp of VLANs, STP, OSPF, static routing and link aggregation.
- Practical experience configuring and troubleshooting site-to-site and remote-access VPNs.
- Familiarity with network monitoring tools, health checks, backup verification and inventory management.
- Strong troubleshooting, documentation and analytical skills.