Key Responsibilities
1. Network Implementation & Architecture
- Deploy, configure, and maintain enterprise-grade networking equipment (switches, routers, firewalls, wireless access points, and SD-WAN appliances), utilizing vendors such as Cisco, Cisco Meraki, Palo Alto Networks, Fortinet, Huawei, and HPE-Aruba.
- Design and implement secure LAN/WLAN, WAN, and SD-WAN architectures for corporate offices, retail stores, and warehouses, connecting themto central datacenters and multi-cloud environments.
- Collaborate with global IT infrastructure teams to ensure regional compliance with group-wide security policies, network standards, and architecture blueprints.
2. Cloud Networking, Firewall & Multi-Vendor SD-WAN Administration
- Administer, optimize, and secure next-generation firewalls (NGFW)—with deep hands-on expertise in Palo Alto Networks and Fortinet FortiGate—to protect regional perimeters, enforce security policies, and manage site-to-site and remote-access VPNs.
- Manage and troubleshoot enterprise SD-WAN deployments across platforms including Huawei SD-WAN and Cisco Meraki, ensuring resilient branch connectivity and optimized application performance.
- Configure and manage cloud networking architectures across Azure (Virtual Networks/VPCs, subnets, routing tables, peering, hybrid cloud connections like ExpressRoute/Interconnect, and cloud firewalls).
- Implement and manage granular cloud security controls, including Azure Network Security Groups (NSGs) and Application Security Groups (ASGs), to secure cloud workloads and regulate traffic flow.
3. Operations, Monitoring & Performance Optimization
- Monitor network performance, bandwidth utilization, and uptime using monitoring tools to proactively identify and resolve bottlenecks.
- Manage core IP infrastructure services, including DHCP, DNS, and IPAM (utilizing Infoblox where applicable) to maintain reliable and secure network name resolution and address allocation.
- Manage backup configurations, firmware updates, and patch management schedules for all regional network hardware to mitigate vulnerabilities.
- Troubleshoot complex Level 2 and Level 3 network incidents, coordinate with telecommunications providers, global support teams, and external vendors to ensure rapid resolution.
4. Project Management, Change Management & Cross-Functional Collaboration
- Lead regional network infrastructure projects from inception to completion, applying project management methodologies (managing timelines, milestones, resource allocation, and risk).
- Drive structured change management processes, authoring Change Requests, planning implementation windows, conducting risk assessments, coordinating rollback plans, and managing stakeholder communication to minimize operational disruption.
- Liaise proactively with HQ, Group network teams, local IT teams, and external vendors across different markets to align on project requirements, coordinate deployment schedules, and ensure smooth operational handover.
5. Security, Documentation & Training
- Enforce network security best practices, including meticulous firewall rule management, network segmentation, access control lists (ACLs), and secure wireless authentication (802.1X).
- Support internal and external audits by providing precise network documentation, topology maps, and vulnerability remediation reports.
- Write and maintain comprehensive technical manuals, standard operating procedures (SOPs), and network topology documentation.
- Conduct technical training sessions and knowledge-sharing workshops for local IT support teams and regional stakeholders to upskill staff and ensure operational consistency.
Profile & Qualifications
- Education: Bachelor’s degree in Computer Science, Information Technology, or equivalent practical experience.
- Experience: 5+ years of hands-on experience in enterprise network administration and multi-site deployments (retail or luxury sectors preferred).
- Certifications: Professional-level certifications are strongly preferred (e.g., PCNSA/PCNSE, NSE4/NSE7, CCNA/CCNP, Azure Network Engineer, ITIL Foundation).
Technical Skills:
- Strong expertise in routing and switching protocols (static, BGP, OSPF, Spanning Tree, VLANs).
- Proven, hands-on administrative experience with next-generation firewalls (Palo Alto Networks and FortiGate) and centralized management platforms.
- Extensive hands-on experience configuring and maintaining multi-vendor full-stack (LAN/WLAN/SD-WAN) solutions, specifically Huawei and Cisco Meraki.
- Solid experience in designing and managing cloud networking environments across Azure.
- Strong understanding of wireless network design, site surveys, and Wi-Fi management (Cisco Meraki, Aruba, etc.).
- Experience with Infoblox (IPAM & DHCP) is a strong plus.
- Experience with automation technologies such as Ansible and Terraform, for either on-premises or cloud network infrastructure, is a plus.
Soft Skills & Competencies:
- Highly detail-oriented, ensuring exceptional accuracy in network configuration, troubleshooting, firewall rule maintenance, and technical documentation.
- Demonstrated project management and IT change management skills, with a proven track record of successfully executing structured technical changes and coordinating multi-site rollouts.
- Excellent cross-cultural communication and stakeholder management skills, with a proven ability to collaborate effectively with distributed local IT teams.
- Strong technical writing skills, capable of producing clear documentation, manuals, and conducting engaging training sessions.
- Ability to prioritize tasks in a fast-paced, retail-driven environment with minimal supervision.
