Network Engineer (Cape Town) (must have Mikrotik)

SUMMARY:
My client in Cape Town is urgently seeking a skilled Network Engineer with Mikrotik, Cloud and Linux experience, to manage, monitor, and optimise their network infrastructure

POSITION INFO:
Fully Office-Based Role (Cape Town - Southern Suburbs)

Immediately available would be advantageous.

Required Certifications:

• One or more of the below (Please attach your certificates):
  • CCNP Enterprise or NSE 7 Enterprise Firewall or PCNSE or JNCIP-ENT or MTCRE (or equivalent)
  • CCNP Security or NSE 7 Advanced Threat Protection or PCNSE or JNCIP-SEC or MTCSE (or equivalent)
  • DevNet Associate or NSE 7 Network Security Automation or PCSAE or JNCIA-DevOps (or equivalent)
• Minimum Grade 12

• Routing & Protocols:
  • OSPF
  • BGP
  • MPLS
  • HSRP
  • ECMP
  • L3VPN
  • Policy-Based Routing (PBR)
  • IPv6 routing strategies
• Scripting & Automation:
  • MikroTik RouterOS scripting
  • Bash and/or Python
• Configuration Management:
  • Ansible and REST API integration
  • YAML
  • JSON
  • Other data structures
• Monitoring & Analysis:
  • Dude/Zabbix/Nagios/Prometheus/etc.
  • PRTG
  • SNMP
  • MIB interpretation
  • NetFlow/s analysis
  • Wireshark
  • Syslog
• Security & Access Control:
  • Firewalling (chain/rule-based, zone-based, and policy-based)
  • NATting
  • Remote Access and Site-to-Site VPN (IPsec/IKEv2, SSTP, L2TP, OpenVPN, and WireGuard)
  • 802.1X authentication (RADIUS/TACACS+)
  • Secure SSH/Winbox/HTTPS access hardening
  • DNS security (DoH and DNS filtering)
  • Layer-2 security (DHCP snooping, ARP inspection and port security)
• Quality of Service (QoS):
  • HTB queue trees
  • PCQ-based bandwidth management
  • DSCP marking
  • burst traffic control
  • Rate-limiting policies
• Network Design & Optimisation:
  • VLAN segmentation (802.1Q, QinQ, and PVLANs)
  • Load balancing (PCC, ECMP, and LACP bonding)
  • High availability (VRRP failover, STP/RSTP/MSTP)
  • WAN failover & dynamic failover strategies
  • Dual-stack IPv4/IPv6 implementation
  • NAT traversal techniques
• Wireless Networking & RF Optimization:
  • 802.11a/b/g/n/ac/ax
  • MIMO
  • Beamforming
  • WPA2-Enterprise
  • EAP-TLS
  • MAC filtering
  • Rogue AP detection
  • DFS
  • Channel width selection
  • Interference mitigation
  • MikroTik CAPsMAN
  • WDS
  • Wireless bridging
  • PtP & PtMP deployments
• Advanced Security & Threat Mitigation:
  • DDoS protection (connection limiting, SYN flood protection, and layer-7 filtering)
  • Zero trust security
  • Role-based access control (RBAC)
  • NAC integration
  • SIEM & log management - integration with security event management tools (e.g., Graylog, ELK Stack, and Splunk)