Responsibilities

Designs, administers and supports AWS VPCs, subnets, routing and Transit Gateway connectivity.
Configures and troubleshoots VPN connectivity and related network-routing issues.
Reviews and supports Security Groups and NACLs in accordance with approved security and connectivity requirements.
Administers and troubleshoots AWS Network Firewall, WAF and Palo Alto firewall technologies.
Supports ALB, NLB and GWLB services and investigates availability, routing and traffic-flow issues.
Administers and troubleshoots Route 53 services and associated name-resolution issues.
Supports and troubleshoots Squid services within the supported network environment.
Performs L3 troubleshooting across network, firewall, load-balancing and name-resolution layers.
Reviews security policies and firewall rules for correctness, risk and operational impact and implements approved changes.
Analyses network behaviour and recommends or implements approved optimisation actions.
Leads root-cause analysis for recurring or high-impact network and firewall incidents.
Plans and executes complex changes with clear risk analysis, validation and backout plans.
Provides technical guidance and escalation support to L1 and L2 engineers and coordinates with vendors or other resolver groups.
Maintains network diagrams, operating procedures, rule documentation and troubleshooting knowledge.
Performs any other related task as required.

Requirements

Bachelor's degree in Information Technology, Computer Science, or a related discipline, or equivalent practical experience.
Strong technical expertise in enterprise network security technologies, including NGFW (Cisco/Fortinet), IDS/IPS, WAF, VPN, NAC, Zero Trust (ZTA), SASE, network segmentation, and cloud network security (AWS, Azure, GCP).
Experience with F5, Cisco ISE, Splunk, Microsoft Sentinel, Wireshark, tcpdump, and security automation using Python and Ansible.
Knowledge of security products and platforms such as Fortinet, RSA, Tenable, Trend Micro, or equivalent solutions.
Proven experience in incident, change, and problem management, with strong risk assessment and change implementation capabilities.
Excellent analytical, troubleshooting, and root cause analysis skills in complex enterprise environments.
Strong communication, stakeholder management, and client service skills, with the ability to work effectively across cross-functional teams.
AWS Certified Advanced Networking - Specialty.
Self-motivated, adaptable, and able to manage multiple priorities while delivering high-quality results in a fast-paced environment.
Relevant industry certifications such as CCNP Security, CCIE Security, CISSP, PCNSE certifications are highly desirable.
Demonstrated ability to mentor team members, share knowledge, and contribute to continuous service improvement.