Senior Network Engineer – Security, Cloud Networking & SASE

About the role

Elfonze Technologies is looking for an experienced Senior Network Engineer with a strong background in network security, cloud networking and SASE (Secure Access Service Edge). The role covers designing, implementing, securing and supporting enterprise network infrastructure across GMG and its group companies, in on-premises, stores, warehouses, factories, cloud, remote-access and hybrid environments.

Key responsibilities

• Design, implement and maintain highly available enterprise networks, including LAN, WAN, Wi-Fi, SD-WAN, VPN, DNS, DHCP, routing, switching and segmentation
• Troubleshoot complex network performance, connectivity and availability issues, and develop network standards and documentation
• Design Zero Trust-aligned secure architectures, configure next-generation firewalls, IPS/IDS, VPN and web security, and investigate security incidents
• Work with external NOC and SOC teams, perform security assessments and integrate with SIEM/SOC tools
• Support AWS, Azure and/or Google Cloud networking, including VPC/VNet, private endpoints, cloud firewalls and hybrid-cloud connectivity
• Design and run SASE architectures covering ZTNA, SWG, CASB, FWaaS, SD-WAN and DLP, and set identity- and context-based access policies
• Support secure SaaS adoption, assess SaaS security implications and partner with security and application teams
• Act as a senior escalation point, lead root-cause analysis, take part in incident management and on-call rotations
• Implement monitoring, logging, alerting and automation, and build dashboards for availability and security

Required profile

• Experienced senior network engineer combining deep networking expertise with hands-on technical security experience
• Strong understanding of SASE/SaaS security platforms, Zero Trust, SD-WAN, wireless, switching, routing, cloud connectivity, firewalls and secure remote access

Required skills

• Networking: TCP/IP, DNS, DHCP, BGP, OSPF, EIGRP, VLANs, STP, VXLAN, MPLS, SD-WAN, IPv4/IPv6, load balancing, packet analysis
• Security: next-gen firewalls, IDS/IPS, VPN, Zero Trust, NAC, SIEM/SOC integration, incident response
• Cloud: AWS, Azure, GCP networking, VPC/VNet, cloud routing, private endpoints, hybrid-cloud networking
• SASE: ZTNA, SWG, CASB, FWaaS, SD-WAN, DLP