Duties & Responsibilities
Duties
Design and manage SD-WAN, LAN, and Wireless mesh networks (Cisco/Huawei/Ubiquiti), ensuring 99.9% uptime.
Deploy and manage Next-Gen Firewalls (NGFW) with IDS/IPS, implementing Zero Trust Network Access (ZTNA) and Network Access Control (NAC) policies.
Manage secure authentication protocols (SSO, MFA, SAML, LDAP) across Active Directory and Azure AD.
Utilise SIEM tools (e.g., Splunk, AlienVault) for real-time log analysis and incident response, while conducting regular vulnerability assessments.
Secure edge connectivity between the campus and cloud services (Direct Connect/Express Route, VPNs).
Required Qualifications and Competencies
For appointment to this grade, one MUST have:
Must Have
Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field from an accredited and recognised University is required.
Minimum of six (3) years of proven hands-on experience in Network Engineering and Information Security is essential.
Network infrastructure skills are necessary, including Internet Services, LAN & WAN (Cisco, Huawei, HP, Juniper Networking), Advanced routing and switching, Enterprise Wireless Management, and Infrastructure monitoring tools.
Experience is an added advantage with Next Generation Firewalls and IPS/IDS, FortiGATE firewalls, Active Directory, DNS, DHCP, Remote Access (VPN), Virtualisation (VMware, Proxmox, Docker), Linux and Windows Server Systems.
Essential Professional Certifications
Relevant Professional Certifications including:
CCNP Enterprise (Cisco) qualification OR JNCIP-ENT (Juniper) qualification;
CISSP (Certified Information Systems Security Professional) qualification;
CompTIA Security+ qualification OR SSCP qualification;
Cisco Certified CyberOps Professional qualification;
Palo Alto Networks Certified Network Security Engineer (PCNSE) qualification OR Fortinet NSE 4/5 qualification or CCSP (Certified Cloud Security Professional) qualification.