Network & Security Operations Engineer

Role overview

Network access control and authentication

• Administer Forescout and Aruba ClearPass; implement policy-based access, segmentation, and role-based access assignment.
• Manage 802.1X, certificate-based and MAC authentication, guest access, and TACACS+; integrate NAC with directory, endpoint, and network systems.

Wireless infrastructure

• Manage Aruba controllers, access points, and mobility services; configure SSIDs, VLAN assignments, RF optimization, and security policies.
• Monitor wireless IDS/IPS; troubleshoot connectivity, authentication, roaming, and performance; plan capacity and optimize services.

Routing, switching, and SD-WAN

• Support Cisco routing and switching, LAN/WAN, VLANs, routing protocols, and high availability.
• Manage Fortinet SD-WAN and support network upgrades, changes, and performance tuning.

Firewall and cloud networking

• Maintain Palo Alto firewalls, policies, NAT, VPNs, threat prevention, segmentation, performance, and compliance.
• Manage Azure VNets, NSGs, Load Balancers, VPN Gateways, hybrid connectivity, and on-premises cloud security integration.

Web security and proxy

• Manage Zscaler and Forcepoint; configure web filtering, SSL inspection, DLP, and access controls; resolve proxy connectivity and security issues.

Required qualifications

• Hands-on Forescout and Aruba ClearPass experience; knowledge of 802.1X, certificate and MAC authentication, TACACS+, and guest access.
• Experience in policy-based access control, segmentation, Aruba Wireless, Cisco routing and switching, Palo Alto firewalls, and Fortinet SD-WAN.
• Knowledge of Azure networking and hybrid connectivity; practical Zscaler and Forcepoint administration and web security controls.

Preferred certifications

• Forescout Certified Administrator, CCNP Enterprise, PCNSA/PCNSE, Fortinet NSE 4+, Aruba ACMP/ACDX, or Microsoft Azure Administrator (AZ-104) or equivalent are preferred.