職務内容：

Role:

The “Network Security Engineer Tier 2” is a key role for infrastructure projects and maintenance. This role provides support for infrastructure and Operations Team. This role is responsible to liaise with internal and external parties to solve problems for infrastructure, provide technical advice to management and ensure the infrastructure is healthy.

Key Responsibilities:

- Experience in Switching on advance level troubleshooting and implementation.

- In-depth knowledge of layer 2 technologies such as spanning tree, VTP, Ethernet, HSRP, 802.1X.

- Experience in Routing on various Protocols/ Services: Static, RIP, BGP, OSPF, EIGRP, HSRP, NAT, SNMP, TACACS.

- Hands-on experience in troubleshooting & administration Cisco switches, Routers, Access points, Meraki appliance.

- Configuring & troubleshooting WAN network using Routing protocols like OSPF, BGP, MPLS, SD-WAN.

- Strong at configuring and troubleshooting Cisco LAN switches, routers, firewalls, VPN, Meraki & network related problems.

- Should have good experience in configuring and managing VLANs, L2L and Remote Access VPN.

- Deep understanding of F5 and performed administration and maintenance of load balancers, such as F5 Big-IP and cloud based F5 products.

- Hands on design, configuration, and delivery experience in F5 products Specifically, LTM, GTM, ASM, APM, and iRules.

- Proven experience deploying F5 solutions out of the box (i.e. initial setup, F5 licensing process, base configurations, network configurations, deploying different modules, adding/removing VIPS, and advanced configurations)

- Develop and maintain system implementation documents, knowledge base, service reports, CMDB and operational procedures.

- Assist with identification of implementation risks and with development of mitigation or avoidance plans.

- Experience in configuring and managing firewall systems.

Technical Skill Set:

- TCP/IP, UDP, ICMP: Comprehensive understanding of these core protocols.

- Routing Protocols: Proficiency with BGP, OSPF, EIGRP, RIP.

- Switching Protocols: Knowledge of VLANs, STP, VTP, HSRP, VRRP.

- DNS: Experience with DNS configuration, management, and troubleshooting.

- DHCP: Proficiency in setting up and managing DHCP servers and clients.

- Wireless Technologies: Familiarity with Wi-Fi standards (802.11a/b/g/n/ac/ax), wireless security protocols, and wireless network design.

- Network Design: Experience in designing LANs, WANs, MANs, and WLANs.

- High Availability and Redundancy: Designing and implementing high availability solutions, including failover techniques and redundancy protocols.

- Network Hardware: In-depth knowledge of routers, switches, firewalls, load balancers, and other networking equipment

- Encryption and Authentication: Knowledge of SSL/TLS, IPsec, and various authentication methods (RADIUS).

- Expertise in configuring and managing VPNs (site-to-site and remote access).

- Cloud Networking: Experience with Azure networking services.

Personal Profile:

- Customer oriented, service minded and result driven.

- Goal and result oriented with an open attitude.

- Continuous personal development

- Documentation skills

- Excellent communication

- Experience in performing vendor management.

- Ability to handle high pressure situations with key stakeholders.

- Good Analytical skills, Problem solving and Interpersonal skills.

- Proficient in preparation of reports, dashboards, and documentation

Required Qualifications/Certifications:

- BE / BTech preferred.

- 2-3 years’ experience in systems operation and production support.

- Hold and active F5 Certification: 101, 201, 301, 401.

- At least CCNA certification is highly desirable.