Network Sr. Specialist - IT Infrastructure

Job Purpose The Network Senior Specialist within the IT Infrastructure & Operations department is responsible for designing, deploying, managing, and optimizing enterprise-wide network infrastructure and security solutions. Serving as the primary technical authority for high-availability networking, this role ensures seamless connectivity, robust data center operations, multi-cloud networking, and stringent cybersecurity controls across all corporate sites, data centers, and connected destinations. Key Responsibilities 1. Network Architecture & Operational Delivery • Design, configure, and maintain high-availability enterprise networks (LAN, WAN, WLAN, and Data Center topologies) aligned with departmental infrastructure baselines. • Implement and manage advanced routing protocols (BGP, OSPF, EIGRP) and network virtualization technologies (VXLAN, EVPN, MPLS). • Support multi-cloud network connectivity and hybrid setups (AWS DirectConnect, Azure ExpressRoute) to integrate corporate cloud environments with on-premise infrastructure. • Oversee Software-Defined Networking (SDN / SD-WAN) deployments, site-to-site connectivity, and internet edge optimizations. 2. Infrastructure Maintenance & Incident Management • Ensure 99.99%+ uptime across core infrastructure through proactive monitoring, continuous health checks, and redundant architectures. • Function as the highest internal technical escalation point (Tier 3/4) for complex network outages, routing bottlenecks, and connectivity disruptions. • Drive network lifecycle operations, including firmware updates, security patching, hardware lifecycle refresh, and automated configuration backups. • Conduct deep-packet inspection and performance analysis using operational monitoring tools (Wireshark, SolarWinds, PRTG, NetFlow, Datadog). 3. Network Security & Operational Compliance • Partner with the IT Security team to design and enforce network micro-segmentation, Next-Generation Firewalls (Palo Alto, Fortinet, Cisco Firepower), and Intrusion Prevention Systems (IPS/IDS). • Manage enterprise Network Access Control (NAC / Cisco ISE / Aruba ClearPass), Zero Trust Network Access (ZTNA), and secure remote access/VPN infrastructure. • Maintain compliance with enterprise IT security standards, audit requirements, and ITIL-aligned service management practices. 4. Automation & Service Improvement • Automate recurring operational tasks, provisioning workflows, and configuration auditing using Python, Ansible, Terraform, or REST APIs. • Maintain complete network topology documentation, IP Address Management (IPAM) records, standard operating procedures (SOPs), and operational runbooks. 5. Leadership & Vendor Coordination • Lead infrastructure expansion and network modernization projects from design to operational handover. • Provide technical mentorship to network engineers and system administrators within the IT Infrastructure & Operations team. • Manage relations with telecom providers, ISPs, and hardware vendors to enforce Service Level Agreements (SLAs), manage link deliveries, and resolve escalated carrier issues. Key Performance Indicators (KPIs) • Infrastructure Availability & SLA: Core network uptime score across data centers and corporate sites. • Mean Time to Repair (MTTR): Resolution speed for major (Tier 3) network incidents and outages. • Operational Security & Hygiene: Zero critical unpatched network vulnerabilities or unapproved configuration changes. • Project Delivery Execution: On-time execution of infrastructure rollouts, upgrades, and site integrations. Qualifications & Experience Education • Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related technical discipline. Work Experience • 7–10+ years of hands-on experience in enterprise network engineering, data center networking, and infrastructure operations. • Demonstrated history of supporting multi-site enterprise environments, campus networks, and cloud hybrid setups. Professional Certifications (High-level required) • Cisco: CCNP Enterprise / CCNP Security (CCIE is a strong plus) • Firewall / Security: PCNSE (Palo Alto) or NSE 4/7 (Fortinet) • Cloud Networking: AWS Certified Advanced Networking – Specialty or Azure Network Engineer Associate • IT Service Management: ITIL v3/v4 Foundation (Preferred for operations alignment) Technical Skills Matrix Domain Required Technical Proficiency Routing & Switching BGP, OSPF, EVPN/VXLAN, Spanning Tree (RSTP/MSTP), LACP, VRRP/HSRP Network Security Palo Alto Networks, Fortinet FortiGate, IPsec VPN, SSL-VPN, ZTNA Wireless & NAC Cisco Catalyst/DNA Center, Aruba Wireless, Cisco ISE, 802.1X SD-WAN & Cloud Cisco SD-WAN (Viptela), Palo Alto Prisma, AWS DirectConnect, Azure ExpressRoute Automation & Tooling Python, Ansible, Terraform, Git, NetBox, REST APIs Monitoring & Protocols SNMPv3, Syslog, NetFlow/sFlow, IPAM, DNS/DHCP, Wireshark

7–10+ years of hands-on experience in enterprise network engineering, data center networking, and infrastructure operations. Demonstrated history of supporting multi-site enterprise environments, campus networks, and cloud hybrid setups. Professional Certifications (High-level required): Cisco CCNP Enterprise / CCNP Security (CCIE is a strong plus); PCNSE (Palo Alto) or NSE 4/7 (Fortinet); AWS Certified Advanced Networking – Specialty or Azure Network Engineer Associate; ITIL v3/v4 Foundation (Preferred for operations alignment).

1. Design, configure, and maintain high-availability enterprise networks (LAN, WAN, WLAN, and Data Center topologies) aligned with departmental infrastructure baselines. 2. Implement and manage advanced routing protocols (BGP, OSPF, EIGRP) and network virtualization technologies (VXLAN, EVPN, MPLS). 3. Support multi-cloud network connectivity and hybrid setups (AWS DirectConnect, Azure ExpressRoute) to integrate corporate cloud environments with on-premise infrastructure. 4. Oversee Software-Defined Networking (SDN / SD-WAN) deployments, site-to-site connectivity, and internet edge optimizations. 5. Ensure 99.99%+ uptime across core infrastructure through proactive monitoring, continuous health checks, and redundant architectures. 6. Function as the highest internal technical escalation point (Tier 3/4) for complex network outages, routing bottlenecks, and connectivity disruptions. 7. Drive network lifecycle operations, including firmware updates, security patching, hardware lifecycle refresh, and automated configuration backups. 8. Conduct deep-packet inspection and performance analysis using operational monitoring tools (Wireshark, SolarWinds, PRTG, NetFlow, Datadog). 9. Partner with the IT Security team to design and enforce network micro-segmentation, Next-Generation Firewalls (Palo Alto, Fortinet, Cisco Firepower), and Intrusion Prevention Systems (IPS/IDS). 10. Manage enterprise Network Access Control (NAC / Cisco ISE / Aruba ClearPass), Zero Trust Network Access (ZTNA), and secure remote access/VPN infrastructure. 11. Maintain compliance with enterprise IT security standards, audit requirements, and ITIL-aligned service management practices. 12. Automate recurring operational tasks, provisioning workflows, and configuration auditing using Python, Ansible, Terraform, or REST APIs. 13. Maintain complete network topology documentation, IP Address Management (IPAM) records, SOPs, and operational runbooks. 14. Lead infrastructure expansion and network modernization projects from design to operational handover. 15. Provide technical mentorship to network engineers and system administrators within the IT Infrastructure & Operations team. 16. Manage relations with telecom providers, ISPs, and hardware vendors to enforce SLAs, manage link deliveries, and resolve escalated carrier issues.