The role combines strong knowledge of data communications with hands-on experience in network security Key Responsibilities:
* Implement and enforce information security policies across LAN, WAN, and WLAN environments.
* Harden switches, routers, network controllers, and network devices according to organizational security standards.
* Manage and maintain Network Access Control (NAC) systems.
* Implement network access controls using 802.1X and related technologies.
* Implement network segmentation policies using VLANs, ACLs, and additional security controls.
* Secure enterprise wireless networks, including user authentication and guest network segmentation.
* Implement and monitor Firewall policies and access rules in coordination with relevant teams.
* Harden VPN connections and remote access solutions
* Identify and remediate security gaps and vulnerabilities in network infrastructure and devices.
* Participate in new site deployments, network infrastructure upgrades, and implementation of security solutions.
* Collaborate closely with Network, Infrastructure, and external vendor teams.
Requirements: Mandatory Requirements: 2-4 years of experience in data communications and network security.
* Strong hands-on knowledge of TCP/IP, Routing, Switching, VLANs, and ACLs
* Experience configuring, maintaining, or hardening enterprise switches and routers
* Experience working with enterprise Firewall systems.
* Experience with Network Access Control (NAC) systems or implementing 802.1X solutions.
* Familiarity with wireless network security
* Ability to analyze network traffic and troubleshoot network and security issues
* Ability to work independently and collaborate effectively with infrastructure teams. Advantages:
* Experience with Check Point, Fortinet, or Palo Alto
* Experience with enterprise NAC solutions CCNA / CCNP certification or an equivalent certification.
* Experience hardening network devices according to CIS Benchmarks
* Experience working in a multi-site Enterprise environment
* Experience with Network Segmentation and Zero Trust projects.
This position is open to all candidates.