Project Description:

VR-120972

The IT Department is seeking a Network Engineer with at least two years of experience to maintain network in our offices, data centres and public clouds. Our team is responsible for network services across all Luxoft locations (45+) and Public Clouds (AWS, Azure).

Responsibilities:

1. Ensure monitoring system is up-to-date and propose improvements.

2. Regularly validate data in NetBox and work on data quality improvement.

3. Keep all documentation in Confluence accurate and up-to-date.

4. Oversee and maintain the stability and performance of the network infrastructure within the EU.

5. Contribute to global IT initiatives, including automation, public cloud integration, and system upgrades.

Mandatory Skills Description:

Core Requirements

1. At least 2 years of hands-on experience working with distributed networks, preferably within an ISP or system integrator environment.

2. Hands-on experience with Palo Alto Networks firewalls and Cisco Secure Firewalls:

- Configuration and administration of Security Policies, NAT, App-ID, User-ID

- Site-to-Site IPSec VPN and SSL VPN (Cisco AnyConnect)

- High Availability configuration (Active/Passive)

- Panorama management

- Basic configuration of Threat Prevention and URL Filtering

- Integration with Microsoft Azure (VPN Gateway, VNet Peering)

3. Experience with enterprise-grade routers such as Cisco ASR/ISR or equivalent platforms.

4. Experience working with Microsoft Azure networking:

- VNet and Subnet design

- Network Security Groups (NSG) and User Defined Routes (UDR)

- VPN Gateway and ExpressRoute

- Azure Firewall and integration with Palo Alto

- Design of hybrid infrastructure (On-Premises + Azure)

5. Practical experience with Terraform:

- Infrastructure as Code for network and cloud resources

- Working with modules

- State management

- CI/CD pipelines for infrastructure deployments

6. Strong understanding of Internet architecture and ISP interconnection principles, including BGP and peering.

7. Solid understanding of OSI model and TCP/IP stack.

8. Experience with monitoring systems and CMDB tools.