Network Engineer

Network L2/L3 Engineer Job

Description

Overview

The personnel capability for this role is expected to be a Senior Network Engineer /

Architect with a minimum of 5+ for L2 and 7+ years’ experience for L3 in the operational support of routing, switching, Wi-Fi, Firewalls, SD-WAN and Network enabling services such as DHCP, DNS and Radius authentication. They should also have experience in the architecture, design and implementation of network solutions encompassing routers and routing protocols, switching including spanning tree, vlan trunking and trunk aggregation, Wi-Fi, SD-WAN (preferably Versa) and Firewalls.

Key Responsibilities

 Management, Configuration and Support of the Boral Network Management

System (Nagios) including software upgrades as required.

 Manage WAN Bandwidth Upgrades including updates to Router/Versa SD-WAN

Device configuration.

 Review Firewall policies annually and remove unused rules.

 Work with Boral Network Team members to upgrade device operating systems

and firmware to ensure the devices are always fit for purpose and cybersecurity

vulnerabilities are mitigated.

 Standardization of Versa SD-WAN configurations across all SD-WAN Sites

 Standardization of VLAN numbering across all sites.

 Standardisation of Guest Wi-Fi subnet allocation across all sites.

 Standardisation of Wi-Fi SSID’s across all sites.

 Transition of Sites from Optus WAN services to Telstra WAN Services

 Review ClearPass configuration bi-annually and remove unused entries.

 Monitor and Manage renewal of certificates for Firewalls and Aruba ClearPass.

 Review DNS configuration bi-annually and remove unused entries.

 Review DHCP configuration bi-annually and remove unused scopes.

 Cutovers from one WAN type to another. E.g. From a 4G Data Service to NBN

Fixed service.

 Configuring and testing of Network Devices for new sites or additions to existing

sites as per configuration templates using the Network Automation server.

 Must have experience with Checkpoint/Palo Alto Firewall, Azure and AWS cloud

networking, VMwareNSX, MPLS, HPE Aruba (ClearPass, Aruba Central,

Airwave, Anchor Controller), Avaya, MS Teams and Skype for Business or

equivalents.

 Experience with administering network platforms such as HPE Aruba,

CheckPoint, Palo Alto, Netskope and Cloudflare.

 Excellent technical skills and knowledge relating to installation and support of

network technologies i.e. Perimeter Firewalls Policy management, proxy, remote

access, IDS/IPS, access control, B2B VPNs, VIP Load Balancing, switching &

routing and tel

 Update CMDB (Cherwell) with all new equipment details (CI’s) and site details.

 Remove CI’s from the CMDB for sites that have closed.

Required Qualifications

 Education: Bachelor's degree in Computer Science, Information Technology, or a

related field. Relevant certifications (e.g., CCNP, CCIE) are highly desirable.

 Experience: Minimum of 5+ yrs of experience for L2 role and 7+ years of experience

for L3 role in network engineering, with a focus on L2/L3 responsibilities.

Demonstrated experience in managing complex network environments.

 Technical Skills: Proficiency in routing and switching technologies, firewall

management, VPN configuration, and network monitoring tools. Experience with

network automation and scripting is a plus.

 Soft Skills: Excellent problem-solving abilities, strong communication skills, and the

ability to work independently and as part of a team.

 Certifications: CCNP, CCIE, or equivalent certifications are preferred.

Preferred Skills

 Advanced Troubleshooting: Ability to diagnose and resolve complex network issues

efficiently.

 Network Design: Experience in designing scalable and secure network architectures.

 Security Focus: In-depth knowledge of network security best practices and

technologies.

 Project Management: Proven track record of leading network projects and delivering

results.

 Vendor Management: Experience in managing vendor relationships and