Senior Network Engineer – Technical Security, Cloud Networking & SASE

Senior Network Engineer – Technical Security, Cloud Networking & SASE -Data Center & Fortinet

Position Overview

Experienced Senior Network Engineer with a strong background in network security, cloud networking, and SASE (Secure Access Service Edge) technologies. The role will be responsible for designing, implementing, securing, and supporting enterprise network infrastructure across GMG and its group Companies on-premises, Stores, Warehouses, Factories, cloud, remote-access, and hybrid environments.

The ideal candidate will combine deep networking expertise with hands-on technical security experience and a strong understanding of SASE/SaaS security platforms, Zero Trust, SD-WAN, Wireless, Switching, Routing, cloud connectivity, firewalls, and secure remote access.

Key Responsibilities

Network Engineering

· Design, implement, and maintain highly available enterprise network architectures.

· Manage LAN, WAN, Wi-Fi, SD-WAN, VPN, DNS, DHCP, routing, switching, and network segmentation.

· Troubleshoot complex network performance, connectivity, and availability issues.

· Develop network standards, architecture documentation, and operational procedures.

· Participate in network modernization and infrastructure transformation initiatives.

Network Security

· Design and implement secure network architectures aligned with Zero Trust principles.

· Configure and manage next-generation firewalls, IPS/IDS, VPN, web security, and network access controls.

· Implement network segmentation and security policies to reduce attack surface.

· Investigate and remediate network security incidents.

· Work closely with External Network & Security Operations/NOC & SOC teams on threat detection and response.

· Perform security assessments of network infrastructure and identify vulnerabilities.

Cloud Networking

· Design and support networking across AWS, Microsoft Azure, and/or Google Cloud environments.

· Implement secure connectivity between on-premises infrastructure and cloud environments.

· Work with VPC/VNet architecture, routing, security groups, private endpoints, VPN, and dedicated cloud connectivity.

· Support cloud migration and hybrid-cloud transformation projects.

· Implement network security controls within cloud environments.

SASE / Secure Access

· Design, implement, and operate SASE architectures.

· Support technologies such as:

o ZTNA – Zero Trust Network Access

o SWG – Secure Web Gateway

o CASB – Cloud Access Security Broker

o FWaaS – Firewall as a Service

o SD-WAN

o DLP and cloud security controls

· Manage secure connectivity for remote users, branch offices, applications, and cloud services.

· Develop and enforce identity- and context-based access policies.

· Monitor SASE performance, security events, and user experience.

SaaS & Cloud Security

· Support secure adoption of enterprise SaaS applications.

· Assess network and security implications of SaaS integrations.

· Work with identity, authentication, API connectivity, and data protection controls.

· Partner with security and application teams to implement secure SaaS architectures.

· Support third-party/cloud service security assessments.

Incident & Problem Management

· Act as a senior escalation point for critical network and security incidents.

· Lead troubleshooting and root-cause analysis for complex infrastructure problems.

· Participate in major incident management and post-incident reviews.

· Develop corrective and preventive actions for recurring issues.

· Maintain incident, problem, and change-management documentation.

· Participate in an on-call/24×7 support rotation, where required.

Automation & Monitoring

· Implement network monitoring, logging, alerting, and performance-management solutions.

· Use automation to improve network configuration and operational efficiency.

· Integrate network and security platforms with centralized monitoring/SIEM systems.

· Develop dashboards and operational metrics for network availability and security.

Required Technical Skills

Networking

· TCP/IP, DNS, DHCP

· BGP, OSPF, EIGRP

· VLANs, STP, VXLAN

· MPLS and SD-WAN

· IPv4/IPv6

· Load balancing

· Network troubleshooting and packet analysis

Security

· Next-generation firewalls

· IDS/IPS

· VPN and secure remote access

· Network segmentation

· Zero Trust

· NAC

· SIEM/SOC integration

· Security monitoring and incident response

Cloud

· AWS / Azure / GCP networking

· VPC/VNet

· Cloud routing

· VPN and dedicated connectivity

· Private endpoints

· Cloud firewalls

· Hybrid-cloud networking

· SASE

· ZTNA

· SWG

· CASB

· FWaaS

· SD-WAN

· DLP

·