Network Engineer - D13 Macpherson, Braddell, SG

Roles & Responsibilities

Key Responsibilities :

• Design, deploy, and manage end-to-end security architectures, including network perimeter defenses, segmentation, intrusion prevention systems, and zero-trust access frameworks.
• Lead implementation and operationalization of Security Management Solutions, such as SIEM, NAC, Vulnerability Management Systems, and Network Access Controls.
• Manage and maintain secure configurations for routers, switches, firewalls, and network devices using Network Management Systems (NMS) and centralized policy enforcement.
• Perform real-time security monitoring, event correlation, and incident response, coordinating with the Security Operations Center (SOC) when required.
• Troubleshoot and resolve security-related issues in live network environments, including threat containment, malware isolation, and root cause analysis.
• Apply deep knowledge of security protocols and network-layer defense mechanisms, including IPSec, VPN, AAA, ACLs, and network segmentation techniques.
• Fulfill and track security service requests (e.g., access control changes, firewall rules, DNS security settings, IP whitelisting / blacklisting) through formal Change Management processes aligned with ITIL.
• Develop, update, and maintain security documentation, including network security diagrams, configuration baselines, risk registers, runbooks, and incident response plans.
• Manage patch management lifecycle for network infrastructure : assess vulnerabilities, prioritize, test, and deploy security patches and firmware updates in a controlled manner.
• Coordinate with vendors to address published security advisories, CVEs, and ensure timely mitigation across all impacted systems.
• Conduct security assessments, risk reviews, and internal audits to ensure compliance with ISO 27001, NIST, GDPR, or other regulatory frameworks.
• Work collaboratively with the IT, DevOps, and Cloud teams to implement secure networking practices across on-premises and cloud environments.
• Automate security tasks using scripting (Python, Bash, PowerShell) or configuration management tools (Ansible, Puppet, etc.) for scalable defense mechanisms.
• Perform other related tasks as assigned by the Institute or Security Leadership.

Required Qualifications and Experience :

Strong technical knowledge in :

Tell employers what skills you have

Switches

Change Management

Scripting

Information Technology

Routing

Access Control

IP

Networking

Firmware

Routers

ITIL

Ansible

Network Security

VPN

DNS