Network Security Engineer

ROLE:

The
IT Network Security& Development Engineer

;

• Ensure the overall stability, security, integrity, and efficient online operation of Company Network Backbone as well Infrastructure Connectivity. Work with various IT Support Team to identify and mitigate security issues, vulnerabilities and misconfigurations by applying in-depth knowledge to resolve network & infrastructure related issues.
• Responsible for Network Support Operations Day-to-Day Tasks, including assigned tickets and escalated tickets
• Conducting regular network infrastructure review to assess gaps and recommends changes to support the present organizational needs and ensuring optimal performance and availability of all enterprise systems.
• Respond to addresses securityincidents and IT security policyviolations pertaining to the enterprise infrastructure level immediately.
• Document Networkrelated issue Root Cause Analysis(RCA), and ensurethat Network related incident report and Root Cause Analysis is released within the agreed Service Level Agreement and liaise with concerned groups for the resolution.

RESPONSIBILITIES:

• Experience competency with administration & configuration of LAN, WAN and wireless infrastructure.
• Manage, configure, administer and implement Cisco Systems & Services such as;
• Firewall
• Palo Alto Firewall, Huawei Firewall and other equivalent firewall appliances.
• Services
  : Huawei CloudManagement/Network Analyzer, FiberLink, RIP/OSPF/BGP Routes, IPS Intrusion Prevention, QoS, VoIP, SSL/SSH Inspection, IPSE Tunnels, SSL-VPN, TCP & UDP Ports Services, HA Cluster, SNMP, NAT, ACL
• NetworkSwitchers
• Palo Alto, Huawei and Cisco Switches

• Services:
  HA, VLANs, Spanning Tree Protocol, Access & Trunk Interfaces, VPC Port Channel, Port Security, SPF Fiber & Copper Modules.

• Wireless Access Points

• Huawei Access Point, Cisco Meraki, Ubiquiti Wi-Fi Access, Captive Portal, Mesh Network, MAC Filtering, DHCP
• Load Balancer/WAN
• HuaweiWAN, SD-WAN controller
• Services:
  SD-WAN IPv4 Rules, FQDN Policy, Auto Routing, SNMP, Bandwidth Management
• Configure, implement, extended security platform/solution in use to protect organization interest e.g. UTM Firewall, Web Filter Baseline, Anti-Virus, Anti-Spam, intrusion detection or intrusion prevention,
• SIEM, and MDM)
• Assess organization managed services control to ensure customer/user policy and security requirements are met.
• Validate to ascertain network security best practices executed through auditing of Network & security Appliances, change logs & configuration.
• Develop, implement and monitor security measures for the protection of computer systems, network, information & data
• Write comprehensive reports including assessment-based findings, outcomes and propositions incline network security enhancement roadmap and documentation of standard operating procedures and protocols.
• Design technical solutions and conduct proactive research to analyze security weaknesses and recommend appropriate strategies.

QUALIFICATION:

• Bachelor's Degree in Information Technology or related Associate & Business Course
• At least;
• 2

years working experience
- 1

years' experience in the NetworkSupport Administration &Network Security

field or same capacity
.
- Experience with Ticketing System& Issue Escalation Process
- Familiar with;
- Issue Management and Escalation Process
- Incident Management Process
- ChangeManagement Process
- Certification is a PLUS
but not required
:
- CCNA
- CompTIA Network+
- NSE4Huawei, Palo Alto & Cisco
- Other equal network management, administration and or securitycertifications.

SKILLS & COMPETENCIES:

• Knowledge in cross platformenvironment such as Windows, Open Source, etc.
• Knowledgeable in network infrastructure, Firewall such as Huawei Palo Alto.
• Knowledge in Security Applications e.g. IDS/IPS, VPN, SIEM, MDM, SSL
• Relevant experience in Network Hardware Infrastructure and Security Appliance/Services

"
A PLUS
" such as;

• Firewalls, Switches, Routers, Servers, Cables, LAN/WAN, VoIP, Local Traffic Shape QOS, SDWAN, DWDM, Load Balancer
• WIFI AccessPoint, MAC Filtering
• SD-WANInterface, FQDN Policy,NAT, Routing, TCP UDP Ports Services
• IP Sub netting,SSL/SSH Inspection, SSL VPN, others.
• Comprehensive understanding on Cisco technologies and commands e.g. Cisco vPC (virtual Port Channel), OSPF, Static routing, etc.
• Knowledge in vulnerability scanningand penetration test tools
• Good written and verbal communication skills and be able to communicate network security issue to peers and management clearly and effectively.