Cybernara
Website:
cybernara.com
Job details:
We are looking for an L2 Network and Security Engineer to support our client’s office network operations and upcoming office migration project.
This is not a basic desktop support role. The person should be able to handle network checks, firewall review, configuration validation, troubleshooting, migration support, and day-to-day network/security coordination.
The engineer will work closely with the client team, Cybernara team, ISP teams, and other technical stakeholders to keep the network stable, secure, and properly documented.
Key Responsibilities
- Support day-to-day network and security operations at the client site.
- Review and validate firewall, switch, WAN, LAN, VLAN, VPN, and routing-related configurations.
- Assist in planning and execution of office network migration activities.
- Coordinate with ISP, firewall, voice/PBX, CCTV, and third-party support teams when required.
- Troubleshoot internet, LAN, Wi-Fi, VPN, firewall, and connectivity issues.
- Support firewall policy review, NAT rules, VPN tunnels, access rules, and security configuration checks.
- Validate network segmentation for users, voice, CCTV, guest Wi-Fi, and management networks.
- Assist with switch configuration, port mapping, VLAN assignment, and basic network hardening.
- Monitor security and network events in Elastic SIEM.
- Review SIEM alerts and coordinate initial investigation with the internal team.
- Maintain basic documentation of network diagrams, IP addresses, VLANs, firewall rules, device inventory, and changes.
- Support change activities during office migration, cutover, and post-migration stabilization.
- Escalate complex issues to senior engineers or vendors with proper details and logs.
Required Skills
- 3+ years of hands-on experience in network and security operations.
- Strong understanding of LAN, WAN, VLAN, TCP/IP, DNS, DHCP, NAT, routing, and switching.
- Hands-on experience with firewall administration and troubleshooting.
- Experience with Sophos firewall is preferred.
- Exposure to WatchGuard firewall will be an added advantage.
- Good understanding of IPsec VPN and remote access VPN.
- Basic switch configuration experience, including VLANs, trunk/access ports, and port troubleshooting.
- Experience with Elastic SIEM or similar SIEM tools.
- Ability to review alerts, logs, and basic security events.
- Ability to troubleshoot ISP, internet, firewall, switch, Wi-Fi, and endpoint connectivity issues.
- Understanding of network security best practices.
- Ability to read and update network diagrams and technical documentation.
- Good coordination skills with vendors, ISP teams, and internal stakeholders.
Good to Have
- Experience in office network migration or new office setup.
- Experience with Sophos XGS firewall.
- Experience with high availability firewall setup.
- Experience with CCTV, voice/PBX, or IP phone network coordination.
- Experience with monitoring tools such as Elastic SIEM, Wazuh, Zabbix, PRTG, or similar.
- Basic knowledge of Active Directory and server connectivity troubleshooting.
- Understanding of change management and incident management process.
Certifications Preferred
Any one or more of the following will be preferred:
- CCNA
- Sophos Firewall certification
- WatchGuard certification
- Network+
- Any firewall, SIEM, or network security certification
Candidate Profile
The ideal candidate should be practical, hands-on, and comfortable working in a live office environment. The person should not only follow instructions but should also be able to identify network risks, validate configuration, check alerts, coordinate with stakeholders, and support smooth migration activities.
Important Note
This role requires real hands-on network, firewall, and basic SIEM experience. Candidates with only desktop support or basic IT support experience may not be suitable unless they have strong practical exposure to network, firewall, and security monitoring work.
Click on Apply to know more.