Network Engineer – Hybrid Infrastructure & Cloud

About the role

We are seeking an experienced Network Engineer to lead the design, implementation and management of our hybrid infrastructure and cloud networking environment. The role covers enterprise networking, security, data‑centre facilities and telephony across the organization.

Key responsibilities

• Administer and maintain all IT network and security components, including routers, switches and firewalls.
• Perform firmware upgrades, hot‑fixes, hardening and security configuration changes on managed devices.
• Design and operate Azure network connectivity using hub‑and‑spoke architecture to enforce segmentation and secure routing.
• Follow configuration and change‑management policies to ensure controlled network modifications.
• Select, implement and integrate security tools, policies and procedures with the security team.
• Incorporate metrics into the organization’s security posture and conduct vulnerability assessments.
• Provide Level‑2/3 support, troubleshoot issues and liaise with vendors and internal IT staff.
• Document all network and system configurations accurately.
• Design, implement and maintain secure cloud network architectures (VNets, subnets, NSGs, route tables, VPN gateways, ExpressRoute).
• Enforce cloud networking governance, including IP‑addressing schemes, segmentation policies and security zoning.

Required profile

• 7–10 years of experience in enterprise network and security environments, preferably in banking, financial services or other regulated industries.
• Proven ability to manage networking, structured cabling, data‑centre facilities, logical and physical security and telephony.
• Strong knowledge of change‑management processes and regulatory compliance.

Required skills

• Routers, switches and firewalls configuration and management.
• Azure networking, hub‑and‑spoke design, VNets, subnets, NSGs, route tables.
• VPN gateways, ExpressRoute, IP‑addressing and network segmentation.
• Firmware upgrades, device hardening and security configuration.
• Security event log management and vulnerability assessment tools.
• Level‑2/3 troubleshooting and vendor liaison.
• Comprehensive network documentation.