Network Engineer (Mikrotik & Cloud experience)

SUMMARY:
My client in Cape Town is urgently seeking a skilled Network Engineer with AWS Cloud & Linux experience to manage, monitor, and optimise their network infrastructure.

POSITION INFO:
Fully Office-Based Role (Cape Town - Southern Suburbs)
Immediately available would be advantageous

Required Certifications:
One or more of the below (Pls attached your certificates):

• CCNP Enterprise or NSE 7 Enterprise Firewall or PCNSE or JNCIP-ENT or MTCRE or equivalent
• CCNP Security or NSE 7 Advanced Threat Protection or PCNSE or JNCIP-SEC or MTCSE or equivalent
• DevNet Associate or NSE 7 Network Security Automation or PCSAE or JNCIA-DevOps or equivalent
• Minimum Grade 12

• Routing & Protocols: OSPF, BGP, MPLS, HSRP, ECMP, L3VPN, Policy-Based Routing (PBR), and IPv6 routing strategies.
• Scripting & Automation: MikroTik RouterOS scripting. Bash and/or Python.
• Configuration Management: Ansible and REST API integration. YAML, JSON, and other data structures.
• Monitoring & Analysis: Dude/Zabbix/Nagios/Prometheus/etc., PRTG, SNMP & MIB interpretation, NetFlow/sFlow analysis, Wireshark, and Syslog.
• Security & Access Control: Firewalling (chain/rule-based, zone-based, and policy-based), NATting, Remote Access and Site-to-Site VPN (IPsec/IKEv2, SSTP, L2TP, OpenVPN, WireGuard), 802.1X authentication (RADIUS/TACACS+), Secure SSH/Winbox/HTTPS access hardening, DNS security (DoH, and DNS filtering), and Layer-2 security (DHCP snooping, ARP inspection, and port security).
• Quality of Service (QoS): HTB queue trees, PCQ-based bandwidth management, DSCP marking, burst traffic control, and rate-limiting policies.
• Network Design & Optimisation: VLAN segmentation (802.1Q, QinQ, and PVLANs), load balancing (PCC, ECMP, and LACP bonding), high availability (VRRP failover, STP/RSTP/MSTP), WAN failover & dynamic failover strategies, dual-stack IPv4/IPv6 implementation, and NAT traversal techniques.
• Wireless Networking & RF Optimization: 802.11a/b/g/n/ac/ax, MIMO, Beamforming, WPA2-Enterprise, EAP-TLS, MAC filtering, rogue AP detection, DFS, channel width selection, interference mitigation, MikroTik CAPsMAN, WDS, wireless bridging, and PtP & PtMP deployments.
• Advanced Security & Threat Mitigation: DDoS protection (connection limiting, SYN flood protection, and layer-7 filtering), zero trust security, role-based access control (RBAC), NAC integration, and SIEM & log management - integration with security event management tools (e.g., Graylog, ELK Stack, and Splunk).