We’re seeking an experienced Network & Security Engineer with 4 years of experience to operate, optimize, and secure enterprise network infrastructure. The ideal candidate will own L2/L3 troubleshooting, implement security policies, and drive continuous improvement across Cisco switching/routing, SonicWall & Fortinet firewalls, Cisco WLC/Wi‑Fi, and SSE solutions like Netskope. Requirements Key Responsibilities Operations & Support • Provide L2/L3 support for LAN/WAN, Wi‑Fi, and security incidents; drive root cause analysis and permanent fixes. • Manage and optimize Cisco routers/switches (OSPF/EIGRP, STP, VLANs, HSRP/VRRP, QoS). • Administer Cisco WLC and enterprise Wi‑Fi (AP provisioning, RF optimization, WPA2/3‑Enterprise, 802.1X). Firewall & Security • Configure and maintain SonicWall and Fortinet (FortiGate) firewalls (NAT, VPN, SD‑WAN, policies, IPS/AV/WEB). • Implement site‑to‑site and remote‑access VPNs, certificate management, and high availability. • Tune security profiles (IPS, Anti‑Virus, Web Filter, Application Control) and monitor threat activity. SSE / Cloud Security • Operate Netskope (SWG, CASB, ZTNA/DLP policies), integrate with IdP (Azure AD/Okta), and onboard endpoints. • Analyze SSE logs/events; optimize policies for user experience and risk reduction. Monitoring & Reliability • Maintain FortiAnalyzer, SonicWall Analytics. • Define and track SLAs/OLAs; drive capacity planning and performance baselines. Change & Compliance • Lead changes via ITIL processes (Request/Change/Problem); maintain network diagrams and SOPs. • Ensure compliance with security standards (e.g., ISO 27001, CIS Benchmarks) and audit readiness. Collaboration • Work with InfoSec, Workplace, Cloud, and App teams on new projects (M&A, branch rollout, cloud migrations). • Vendor coordination for complex issues, RMAs, and firmware advisories. Must‑Have Skills • Routing/Switching: VLAN, trunking, inter‑VLAN, STP/RSTP, NAT, QoS. • Cisco WLC/Wi‑Fi: RF design basics, AP groups, FlexConnect/Local mode, RADIUS/802.1X, Fast Secure Roaming. Firewalls: • SonicWall: Access rules, NAT, DPI, VPN (IKEv2), App Control, HA. • Fortinet: Policy/Objects, SD‑WAN, IPSec/SSL‑VPN, UTM profiles, HA (A‑A/A‑P), FortiManager/FortiAnalyzer. • Netskope: SWG, CASB, ZTNA, DLP, policy creation, client deployment, log analysis. • Security Foundations: TCP/IP, TLS/PKI, DNS/DHCP, identity-aware policies, segmentation (ACLs/VLANs). • Scripting/Automation (nice-to-have): Python/PowerShell, REST APIs for device/report automation. • Tooling: Wireshark, Nmap, SolarWinds/PRTG, FortiAnalyzer, SonicWall Analytics, Certifications (Preferred) • Cisco: CCNA (required or equivalent) • Fortinet: NSE 4 (Firewall Professional) or higher (NSE 5/7 nice-to-have). • SonicWall: SNSA/SNSP (preferred). • Netskope: NSA (Administrator) / NPA (preferred). • Security & ITSM: CompTIA Security+, ITIL Foundation. Soft Skills • Strong customer communication and incident ownership. • Clear documentation and change control discipline. • Analytical mindset for RCA and risk-based decision making. • Collaboration across cross-functional teams and vendors. KPIs / Success Metrics • Incident SLAs: ≥95% resolution within SLA; reduced MTTR. • Stability: Lower repeat incidents; proactive problem records closed. • Security Posture: Reduced false positives, policy compliance, and timely patching/firmware. • Performance: Wi‑Fi user experience (latency, throughput), WAN utilization, SD‑WAN path quality. • Design: Branch network with dual ISP, SD‑WAN, and ZTNA access. • Troubleshooting: Intermittent Wi‑Fi drops on specific SSID—RF vs. RADIUS vs. DHCP analysis. • Security: DLP policy conflicts in Netskope; tuning to reduce false positives. • Firewalls: Migrating SonicWall to FortiGate with parity policies and VPNs. • Packet analysis: TLS handshake failures; SNI-based policy impacts. • Audit Readiness: Up-to-date diagrams, SOPs, access reviews, and config backups. Education ​ Bachelor’s in Computer Science/IT/ECE (or equivalent experience). Benefits • Health insurance coverage for employee, spouse, and kids • Retirement savings plan with employer matching contributions • Opportunities for professional development and advancement within the organization