Senior Network Administrator

About the role

Unify is looking for a Senior Network Administrator to lead the design, implementation and maintenance of enterprise LAN/WAN, data center and branch connectivity, including routing, switching and SD-WAN. The role also covers next-generation firewalls, Azure networking, security incident response, VoIP and mentoring junior engineers.

Key responsibilities

• Design, implement and maintain enterprise LAN/WAN, data center and branch connectivity, including routing, switching and SD-WAN.
• Architect, deploy and manage Palo Alto and FortiGate firewalls, including security policies, NAT, segmentation and high availability.
• Own the firewall rule lifecycle: review, optimize, audit and clean up rule bases.
• Design and maintain site-to-site and remote-access VPNs; configure and tune IDS/IPS, URL filtering and threat prevention.
• Design and secure Azure VNets, ExpressRoute, VPN Gateway, NSGs and Azure Firewall.
• Monitor network performance, optimize it, and provide Tier 3 escalation support for complex network, firewall and voice issues.
• Investigate and respond to network security incidents, coordinate vulnerability assessments and penetration tests, and manage SSL/TLS certificates.
• Enforce privileged access controls (PAM, AAA, TACACS+/RADIUS) and manage VoIP systems (SIP, call routing, quality monitoring).
• Lead network changes through change management, maintain configuration and architecture documentation, and take part in disaster recovery and business continuity planning.
• Mentor junior engineers, evaluate new technologies and manage vendor relationships.

Required profile

• Bachelor's degree in IT, Computer Science, Networking or a related field.
• 7+ years of network engineering experience, with at least 3 years managing enterprise firewalls.
• Strong analytical and troubleshooting skills, able to lead under pressure during outages and incidents.
• Excellent documentation and communication skills.

Required skills

• Routing and switching protocols (BGP, OSPF, VLANs, STP, HSRP/VRRP, QoS)
• Palo Alto and/or FortiGate firewalls in production; Cisco, HP and Huawei switching and routing
• Azure networking (VNets, hybrid connectivity, Azure Firewall/NSGs)
• Zero Trust concepts, network segmentation and VoIP (Cisco Call Manager, Avaya)
• Preferred: PCNSE, Fortinet NSE 4-7, CCNP Enterprise/Security (CCIE a plus), Microsoft AZ-700