Network Engineer

Job Summary

The Network Engineer is responsible for planning, designing, implementing, and maintaining the organization’s network infrastructure. This role ensures optimized connectivity and segmentation across enterprise and regulated environments, supporting business, cybersecurity, and compliance objectives.

Key responsibilities include network architecture planning, segmentation for sensitive environments such as the Card Data Environment (CDE), subnet design, and management of switching, routing, VLANs, and firewalls. The Network Engineer collaborates closely with Cybersecurity, Platform Architecture, and Project teams to support connectivity, network readiness, and implementation of best practice frameworks. While not part of Security Operations or Audit & Risk functions, this role provides technical support during network-related incidents, assists in troubleshooting and recovery, and supplies information for audits when required.

Key Responsibilities

1) Network Architecture & Planning

• Design and implement enterprise network infrastructure encompassing LAN, WAN, VPN, wireless, and data center connectivity.
• Plan and execute segmentation for critical systems, including Card Data Environment (CDE), database and application networks, corporate and guest access networks.
• Ensure network segmentation aligns with security requirements and regulatory frameworks (PCI-DSS, SOC 2, RMiT).
• Perform network subnet design and planning, maintaining proper IP address allocation and documentation.
• Possess authority to allocate and manage project subnets, including preparing network addressing schemes for new implementations.
• Maintain and regularly update comprehensive network architecture diagrams, reflecting physical and logical topologies across the organization.

2) Network Operations & Management

• Manage and administer switching, routing, and VLAN configurations, including wireless subnet assignments and access segmentation.
• Maintain network device configurations following baseline standards and approved change management processes.
• Collaborate in managing firewalls, primarily supporting policy reviews, configuration updates, and network routing integration.
• Conduct network performance monitoring, bandwidth optimization, and error resolution to ensure high availability.
• Support operational readiness for initiatives such as SASE, Zero Trust Network Access (ZTNA), and Network Data Loss Prevention (DLP) deployments.
• Ensure all network changes are documented, reviewed, and aligned with infrastructure and cybersecurity standards.

3) Incident Response & Troubleshooting

• Serve as the first escalation point for diagnosing and resolving network-related issues.
• Participate in incident response activities concerning connectivity failures, latency, or security-related network disruptions.
• Perform root cause analysis for network incidents and document corrective measures to prevent recurrence.
• Support service restoration and contribute to post-incident reviews from a network engineering perspective.

4) Collaboration & Governance Support

• Collaborate with the Cybersecurity Lead, Infrastructure, and Project teams on architecture validation, security-aligned network design, and secure system integration, while supporting the SOC on shared firewall operations and network log requests when required.
• Provide information related to network architecture, subnets, and configurations to audit or compliance teams upon request.
• Minimal engagement in risk management or compliance tracking beyond necessary information provision.

Required Skills and Qualifications:

Must-Have:

• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or equivalent experience.
• 2-3 years of experience in enterprise network design, implementation, and operations.
• Strong technical knowledge and hands-on experience in switching and routing (BGP, OSPF, VLAN, MPLS, STP).
• Experience with firewall platforms such as Fortinet or similar technologies.
• Hands-on experience with VPN and secure remote access technologies.
• Solid understanding of network subnetting, IP addressing (IPAM), and VLAN management.
• Experience in wireless network configuration including SSID setup and VLAN association.
• Proficiency in network diagramming tools such as Visio, Lucidchart, or Draw.io. • Basic certifications such as CompTIA Network+, Security+, or CCNA (or equivalent knowledge).
• Strong analytical and troubleshooting skills in network environments.
• Good documentation and communication skills.

Nice-to-Have:

• Understanding of PCI-DSS, SOC 2, and RMiT requirements relating to network segmentation and data protection.
• Experience with Ansible, Python, or Terraform for network automation and configuration management.
• Hands-on experience with network monitoring and analysis tools such as Wireshark, SolarWinds, or NetFlow.