Senior Network Engineer – Technical Security, Cloud Networking & SASE

Senior Network Engineer – Technical Security, Cloud Networking & SASE

Position Overview

Experienced Senior Network Engineer with a strong background in network security, cloud networking, and SASE (Secure Access Service Edge) technologies. The role will be responsible for designing, implementing, securing, and supporting enterprise network infrastructure across GMG and its group Companies on-premises, Stores, Warehouses, Factories, cloud, remote-access, and hybrid environments.

The ideal candidate will combine deep networking expertise with hands-on technical security experience and a strong understanding of SASE/SaaS security platforms, Zero Trust, SD-WAN, Wireless, Switching, Routing, cloud connectivity, firewalls, and secure remote access.

Key Responsibilities

Network Engineering

· Design, implement, and maintain highly available enterprise network architectures.

· Manage LAN, WAN, Wi-Fi, SD-WAN, VPN, DNS, DHCP, routing, switching, and network segmentation.

· Troubleshoot complex network performance, connectivity, and availability issues.

· Develop network standards, architecture documentation, and operational procedures.

· Participate in network modernization and infrastructure transformation initiatives.

Network Security

· Design and implement secure network architectures aligned with Zero Trust principles.

· Configure and manage next-generation firewalls, IPS/IDS, VPN, web security, and network access controls.

· Implement network segmentation and security policies to reduce attack surface.

· Investigate and remediate network security incidents.

· Work closely with External Network & Security Operations/NOC & SOC teams on threat detection and response.

· Perform security assessments of network infrastructure and identify vulnerabilities.

Cloud Networking

· Design and support networking across AWS, Microsoft Azure, and/or Google Cloud environments.

· Implement secure connectivity between on-premises infrastructure and cloud environments.

· Work with VPC/VNet architecture, routing, security groups, private endpoints, VPN, and dedicated cloud connectivity.

· Support cloud migration and hybrid-cloud transformation projects.

· Implement network security controls within cloud environments.

SASE / Secure Access

· Design, implement, and operate SASE architectures.

· Support technologies such as:

o ZTNA – Zero Trust Network Access

o SWG – Secure Web Gateway

o CASB – Cloud Access Security Broker

o FWaaS – Firewall as a Service

o SD-WAN

o DLP and cloud security controls

· Manage secure connectivity for remote users, branch offices, applications, and cloud services.

· Develop and enforce identity- and context-based access policies.

· Monitor SASE performance, security events, and user experience.

SaaS & Cloud Security

· Support secure adoption of enterprise SaaS applications.

· Assess network and security implications of SaaS integrations.

· Work with identity, authentication, API connectivity, and data protection controls.

· Partner with security and application teams to implement secure SaaS architectures.

· Support third-party/cloud service security assessments.

Incident & Problem Management

· Act as a senior escalation point for critical network and security incidents.

· Lead troubleshooting and root-cause analysis for complex infrastructure problems.

· Participate in major incident management and post-incident reviews.

· Develop corrective and preventive actions for recurring issues.

· Maintain incident, problem, and change-management documentation.

· Participate in an on-call/24×7 support rotation, where required.

Automation & Monitoring

· Implement network monitoring, logging, alerting, and performance-management solutions.

· Use automation to improve network configuration and operational efficiency.

· Integrate network and security platforms with centralized monitoring/SIEM systems.

· Develop dashboards and operational metrics for network availability and security.

Required Technical Skills

Networking

· TCP/IP, DNS, DHCP

· BGP, OSPF, EIGRP

· VLANs, STP, VXLAN

· MPLS and SD-WAN

· IPv4/IPv6

· Load balancing

· Network troubleshooting and packet analysis

Security

· Next-generation firewalls

· IDS/IPS

· VPN and secure remote access

· Network segmentation

· Zero Trust

· NAC

· SIEM/SOC integration

· Security monitoring and incident response

Cloud

· AWS / Azure / GCP networking

· VPC/VNet

· Cloud routing

· VPN and dedicated connectivity

· Private endpoints

· Cloud firewalls

· Hybrid-cloud networking

· SASE

· ZTNA

· SWG

· CASB

· FWaaS

· SD-WAN

· DLP

· Cloud security policy enforcement

Preferred Certifications

· CCNP Enterprise / CCNP Security

· PaloAlto, Fortinet NSE/FCP, or equivalent firewall certification

· AWS Certified Advanced Networking

· Microsoft Azure Network Engineer Associate

· SASE/Zero Trust vendor certifications

· Security+ / CISSP or equivalent security certification

Education & Experience

· 12 - 15+ years of experience in enterprise networking.

· Strong hands-on experience in network security and cloud networking.

· Experience designing and supporting hybrid-cloud environments.

· Practical experience with SASE technologies and/or major SASE platforms.

· Experience working in large enterprise environments with ITIL-based incident, problem, and change management.

Key Competencies

· Strong analytical and troubleshooting skills.

· Ability to lead complex technical incidents.

· Excellent understanding of network and security architecture.

· Strong communication and stakeholder-management skills.

· Ability to work across Network, Security, Cloud, Infrastructure, and Application teams.

· Strong documentation and technical writing skills.

· Ability to translate business requirements into secure technical architectures.

Success Measures

· The Senior Network Engineer will be measured on:

· Network availability and reliability

· Security posture and reduction of network risk

· Incident resolution and MTTR

· SASE/cloud connectivity performance

· Successful delivery of network transformation projects

· Automation and operational efficiency

· SLA compliance

· Reduction of recurring network and security incidents

· Architecture and technical documentation