Snr IT Networking Engineer

SUMMARY:
Snr Engineer - Networking

POSITION INFO:

Position Overview

The Principal Network Engineer (L4) serves as the highest technical authority within the network domain, responsible for architecting, implementing, and optimizing complex enterprise and data center networks. This individual will provide strategic guidance, lead critical network projects, and act as the escalation point for all high-severity network incidents. This role requires exceptional technical depth across routing, switching, firewalls, wireless, security, and automation, with the ability to translate business requirements into scalable, resilient network architectures.

Key Responsibilities

Architecture & Design

• Lead the design of enterprise, SD-WAN, WAN, LAN, Wifi and data center network infrastructures, ensuring scalability, performance, and high availability.
• Develop reference architectures, network blueprints, and design standards.
• Drive modernization initiatives including SD-WAN, zero-trust, and network automation adoption.
• Define network segmentation, multi-site connectivity, and BGP/OSPF overlay strategies.
• Ensure integration alignment with security, cloud, and systems engineering teams.

Implementation & Operations

• Oversee deployment of new network solutions, firmware upgrades, and topology changes.
• Act as final escalation for critical L3 and L4 incident response, problem resolution, and root cause analysis.
• Conduct advanced troubleshooting across complex hybrid environments (on-prem, cloud, and edge).
• Optimize network performance through continuous analysis and capacity management.

Governance & Standards

• Develop and enforce network configuration, documentation, and operational standards.
• Conduct design and configuration reviews for all major network projects.
• Ensure adherence to compliance frameworks (e.g., ISO 27001, PCI-DSS, POPIA, or similar).
• Define SLA, KPI, and reporting standards for network performance and reliability.

Leadership & Mentorship

• Mentor and technically guide L2–L3 engineers.
• Lead technical workshops, training sessions, and design reviews.
• Collaborate cross-functionally with security, cloud, and infrastructure leaders.
• Provide executive-level recommendations and roadmaps for network strategy.

Required Technical Expertise

Core Networking:

• Expert-level knowledge of routing and switching protocols: BGP, OSPF, EIGRP, IS-IS, STP, VLANs, VXLAN, MPLS, EVPN, and QoS.
• Proven experience with enterprise network architectures, including Cisco Catalyst/Nexus, HPE Aruba, Fortinet and Sophos platforms.
• Deep understanding of WAN optimization, SD-WAN (Cisco, Fortinet, Sophos.), and VPN technologies (IPSec, GRE, SSL VPN, DMVPN).

Data Center & Cloud:

• Experience designing and supporting data center fabric (EVPN/VXLAN).
• Integration experience with AWS, Azure, or GCP networking (Transit Gateway, VNet/VPC peering, hybrid connectivity).

Security & Access:

• Strong understanding of network segmentation, firewall rule design, NAT, ACLs, and Zero Trust models.
• Familiarity with NAC (Cisco ISE or FortiNAC), RADIUS/TACACS+, and AAA frameworks.

Automation & Monitoring:

• Proficiency in network automation (Python, Ansible, or Terraform).
• Deep familiarity with NetFlow, SNMP, Syslog, Prometheus/Grafana, or SolarWinds.

Qualifications & Experience

• Bachelor’s degree in Computer Science, Information Technology, or related field (Master’s preferred) or Relevant Industry Experience.
• 12+ years of hands-on network engineering experience, with at least 5 years in a senior/principal role.
• Vendor certifications such as CCIE, JNCIE, or Arista ACE strongly preferred.
• Proven experience leading large-scale, mission-critical network transformations.

Soft Skills

• Exceptional analytical and problem-solving ability under pressure.
• Excellent written and verbal communication; able to translate complex technical issues into executive-level summaries.
• Strong leadership, mentoring, and stakeholder engagement skills.
• Ability to balance strategic foresight with hands-on technical execution.