Network & Security Engineer

This is a fully remote position, open to applicants in Pakistan, +1 more country.

📋 Description

• Design, implement, and oversee enterprise Layer 3 network infrastructure.

• Configure and administer BGP, EIGRP, and static routing protocols.

• Establish and manage VLANs, inter-VLAN routing, subnetting, IP addressing schemes, and network segmentation.

• Diagnose and resolve LAN, WAN, SD-WAN, and VPN connectivity challenges.

• Oversee network switches, routers, wireless infrastructure, and edge connectivity solutions.

• Design, implement, and manage enterprise Wi-Fi networks across multiple locations.

• Perform site surveys, optimize RF and coverage, and troubleshoot wireless controllers, access points, guest networks, and security policies.

• Enhance network performance, redundancy, and high availability.

• Manage remote-access and site-to-site VPNs, firewalls, and security appliances.

• Maintain firewall policies, NAT rules, VPN configurations, and security zones; address vulnerabilities.

• Monitor and react to security incidents using Zero Trust and least-privilege methodologies.

• Deploy and manage EDR, SIEM, vulnerability management, MFA, IAM, email security, and PAM tools.

• Engage in incident response and forensic investigations.

• Assist with cybersecurity audits, compliance evaluations, and security assessments.

• Create and maintain security documentation, standards, and procedures.

• Ensure secure and reliable connectivity between sites, cloud environments, remote users, and manufacturing or business operations.

⛳️ Requirements

• Bachelor's degree in Information Technology, Computer Science, Network Engineering, Cybersecurity, or a related field.

• 5+ years of experience in enterprise networking and at least 3 years in cybersecurity or security engineering.

• Demonstrated expertise in designing and supporting Layer 3 networks, multi-site enterprise Wi-Fi, firewalls, and VPNs.

• Experience in supporting multi-site environments, remote users, and secure wireless access.

• Familiarity with manufacturing or industrial settings, securing OT/IT networks.

• Practical experience with wired and wireless enterprise networking environments.

• Capability to independently design, implement, secure, and troubleshoot Layer 3 and Wi-Fi network infrastructures.

• Knowledge of Layer 3 networking concepts: OSPF, BGP, VLANs, STP, VRRP/HSRP, TCP/IP, DNS, DHCP, LAN/WAN, and SD-WAN.

• Experience with enterprise wireless platforms such as Cisco Meraki/Catalyst, Aruba, Extreme, Ruckus, or Ubiquiti.

• Understanding of WPA2/WPA3 Enterprise, 802.1X, RADIUS, and NAC.

• Proficiency in firewall administration, IDS/IPS, VPN technologies, and Network Access Control (NAC).

• Skills in security hardening, network segmentation, and endpoint security solutions.

• Familiarity with one or more cybersecurity platforms: Microsoft Defender Suite, CrowdStrike, SentinelOne, Microsoft Sentinel, Splunk, Tenable, Rapid7, or Qualys.

• Experience with one or more firewall platforms: Sophos, Palo Alto Networks, Fortinet FortiGate, Cisco Firepower, Check Point, or SonicWall.

• Knowledge of Microsoft Azure, AWS, and Microsoft 365 Security.

• Preferred certifications include CCNP, CISSP, CISM, Security+.

🏝️ Benefits

• Competitive salary in USD (Dollar Pledge).

• Fully remote position from anywhere in India or Pakistan.

• Supportive and inclusive work environment.

• Opportunities for career advancement in a rapidly growing global organization.