Network Engineer

The personnel capability for this role is expected to be a Senior Network Engineer / Architect with a minimum of 5+ for L2 and 7+ years’ experience for L3 in the operational support of routing, switching, Wi-Fi, Firewalls, SD-WAN and Network enabling services such as DHCP, DNS and Radius authentication. They should also have experience in the architecture, design and implementation of network solutions encompassing routers and routing protocols, switching including spanning tree, vlan trunking and trunk aggregation, Wi-Fi, SD-WAN (preferably Versa) and Firewalls.

Key Responsibilities

• Management, Configuration and Support of the Network Management System (Nagios) including software upgrades as required.
• Manage WAN Bandwidth Upgrades including updates to Router/Versa SD-WAN Device configuration.
• Review Firewall policies annually and remove unused rules.
• Work with Boral Network Team members to upgrade device operating systems and firmware to ensure the devices are always fit for purpose and cybersecurity vulnerabilities are mitigated.
• Standardisation of Versa SD-WAN configurations across all SD-WAN Sites
• Standardisation of VLAN numbering across all sites.
• Standardisation of Guest Wi-Fi subnet allocation across all sites.
• Standardisation of Wi-Fi SSID’s across all sites.
• Transition of Sites from Optus WAN services to Telstra WAN Services
• Review ClearPass configuration bi-annually and remove unused entries.
• Monitor and Manage renewal of certificates for Firewalls and Aruba ClearPass.
• Review DNS configuration bi-annually and remove unused entries.
• Review DHCP configuration bi-annually and remove unused scopes.
• Cutovers from one WAN type to another. E.g. From a 4G Data Service to NBN Fixed service.
• Configuring and testing of Network Devices for new sites or additions to existing sites as per configuration templates using the Network Automation server.
• Must have experience with Checkpoint/Palo Alto Firewall, Azure and AWS cloud networking, VMwareNSX, MPLS, HPE Aruba (ClearPass, Aruba Central, Airwave, Anchor Controller), Avaya, MS Teams and Skype for Business or equivalents.
• Experience with administering network platforms such as HPE Aruba, CheckPoint, Palo Alto, Netskope and Cloudflare.
• Excellent technical skills and knowledge relating to installation and support of network technologies i.e. Perimeter Firewalls Policy management, proxy, remote access, IDS/IPS, access control, B2B VPNs, VIP Load Balancing, switching & routing and tel
• Update CMDB (Cherwell) with all new equipment details (CI’s) and site details.
• Remove CI’s from the CMDB for sites that have closed.

Required Qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CCNP, CCIE) are highly desirable.
• Experience: Minimum of 5+ yrs of experience for L2 role and 7+ years of experience for L3 role in network engineering, with a focus on L2/L3 responsibilities. Demonstrated experience in managing complex network environments.
• Technical Skills: Proficiency in routing and switching technologies, firewall management, VPN configuration, and network monitoring tools. Experience with network automation and scripting is a plus.
• Soft Skills: Excellent problem-solving abilities, strong communication skills, and the ability to work independently and as part of a team.
• Certifications: CCNP, CCIE, or equivalent certifications are preferred.

Preferred Skills

• Advanced Troubleshooting: Ability to diagnose and resolve complex network issues efficiently.
• Network Design: Experience in designing scalable and secure network architectures.
• Security Focus: In-depth knowledge of network security best practices and technologies.
• Project Management: Proven track record of leading network projects and delivering results.
• Vendor Management: Experience in managing vendor relationships and procurement processes.