Network Infrastructure and Security | YAS Networks | Full Time

Yas Networks; Österreich; On-site; EUR 90,000 - 120,000; Full time

Job summary

YAS Networks is seeking a hands-on Technical Lead to own engineering delivery and operational quality across customer network and security environments. You will lead engineers and technicians, make sound technical decisions, and remain directly involved in complex troubleshooting, designs, migrations, and production changes.

You will coordinate with operations and project management to turn customer requirements into clear engineering plans, assign work, and verify results.

Qualifications

• 7+ years hands-on enterprise network engineering and delivery leadership.
• Strong Cisco Catalyst and Nexus with OSPF, BGP, VLANs, VRFs, STP, LACP, and resilient campus/data center designs.
• Production experience with Cisco Secure Firewall FTD and FMC or cloud-delivered management: access policies, NAT order, VPNs, HA, upgrades, packet captures, and fault isolation.
• Working knowledge of enterprise wireless and network access control, including 802.1X, RADIUS, certificate-based authentication, and guest access.
• Ability to trace an application path across DNS, DHCP relay, routing, firewalls, NAT, and VPNs using packet captures, logs, counters, and structured testing.
• Evidence of leading complex migrations and incidents, delegating effectively, reviewing other engineers’ work, and communicating clearly with technical teams and customer leadership.
• Experience using network monitoring and logs to investigate service health, alongside strong documentation and change management habits.
• Ability to support scheduled maintenance windows, participate in an agreed escalation rotation, and attend customer sites as required.

Responsibilities

• Own technical delivery for assigned customer environments; prioritize risks and track dependencies.
• Mentor engineers and technicians; conduct design reviews, establish technical standards, runbooks, and backups.
• Lead architecture/implementation across campus, data center, WAN, wireless, and segmentation; produce designs and rollout plans.
• Own firewall policy, NAT, VPNs, high availability, and network access control; review security changes for impacts.
• Lead major network incidents; coordinate TAC and provide customer updates; restore service and document root cause.
• Own technical readiness reviews and go/no-go decisions; ensure backups, approvals, and rollback readiness.
• Maintain diagrams, inventories, backups, and monitoring; track certificate expiry and lifecycle; automate repeatable tasks.
• Lead customer discussions; explain risks and options; support scope changes with project management.

Skills

Technical leadership

Network troubleshooting

Documentation

Communication

Project coordination

Tools

Cisco Catalyst/Nexus

Cisco Secure Firewall FTD/FMC

802.1X

NAC & VPN technologies

Packet capture tools

Splunk/log analysis

Python automation

Ansible

Job description

Role Summary

YAS Networks is seeking a hands-on Technical Lead to own engineering delivery and operational quality across customer network and security environments. You will lead engineers and technicians, make sound technical decisions, and remain directly involved in complex troubleshooting, designs, migrations, and production changes.

You will coordinate with operations and project management to turn customer requirements into clear engineering plans, assign work, and verify results. The role combines hands-on engineering with technical leadership across multiple customer environments, with accountability for safe changes, reliable service, and complete documentation.

Key Responsibilities

• Technical ownership: Own technical delivery for assigned customer environments. Prioritize risks and escalations with operations, estimate engineering effort, assign work, and track technical dependencies through completion. Escalate resource constraints and major risks early, with clear options and recommendations.
• Team leadership: Delegate work, mentor engineers and technicians, conduct design and configuration reviews, and verify completed work. Establish technical standards, practical runbooks, and backup coverage across the team.
• Architecture and implementation: Lead campus, data center, WAN, wireless, and segmentation projects from discovery through handover. Produce designs, migration sequences, implementation plans, service validation criteria, and rollback procedures validated where practical.
• Network security: Own firewall policy, NAT, site-to-site and remote-access VPNs, high availability, and network access control. Review security changes for routing, identity, application, and business impacts.
• Incident leadership: Lead major network incidents, coordinate engineers and vendor TAC, maintain a timeline, and provide clear customer updates. Restore service safely, document root cause where established, and close corrective actions.
• Change quality: Own technical readiness reviews and recommend go or no-go decisions within the agreed approval process. Confirm peer review, backups, customer approval, rollback readiness, and post-change validation before closing changes.
• Operational improvement: Maintain usable diagrams, inventories, configuration backups, and monitoring. Track certificate expiry, software lifecycle, capacity, and recurring faults; prioritize corrective work and automate repeatable tasks with appropriate safeguards.
• Customer collaboration: Lead technical discussions, explain risks and options clearly, and provide timely incident and project updates. Support scopes of work, equipment selections, effort estimates, and assumptions; coordinate scope changes with project management before committing work.

Required Qualifications

• 7+ years of hands-on enterprise network engineering experience, including proven technical leadership of engineers and delivery of production projects or managed services.
• Strong Cisco Catalyst and Nexus skills, including OSPF, BGP, VLANs, VRFs, STP, LACP, first-hop redundancy, and resilient campus and data center designs.
• Production experience with Cisco Secure Firewall FTD and FMC or cloud-delivered management: access policies, NAT order, VPNs, HA, upgrades, packet captures, and fault isolation.
• Working knowledge of enterprise wireless and network access control, including 802.1X, RADIUS, certificate-based authentication, and guest access. Ability to troubleshoot these services and coordinate with specialist engineers when needed.
• Ability to trace an application path across DNS, DHCP relay, switching, routing, firewalls, NAT, and VPNs using packet captures, logs, counters, and structured testing.
• Evidence of leading complex migrations and incidents, delegating effectively, reviewing other engineers’ work, and communicating clearly with technical teams and customer leadership.
• Experience using network monitoring and logs to investigate service health, alongside strong documentation and change management habits. Ability to assess unfamiliar environments and prioritize remediation based on evidence and business impact.
• Ability to support scheduled maintenance windows, participate in an agreed escalation rotation, and attend customer sites as required.

Preferred Qualifications

• CCNP Enterprise or Security, CCIE, or comparable demonstrated technical depth. Certifications strengthen an application but do not replace practical experience.
• Deeper experience with Cisco ISE, Catalyst 9800 wireless, SD-Access, LISP, Catalyst Center, TrustSec, SD-WAN, or migrations from legacy wireless platforms.
• Azure networking and hybrid connectivity; Nexus vPC or VXLAN/EVPN; and experience coordinating network dependencies with server, virtualization, storage, and cabling teams.
• MSP, higher education, healthcare, or other environments with strict availability requirements and multiple stakeholders.
• Python or Ansible automation, configuration management, and log analysis or SIEM tools such as Splunk. Experience with additional firewall vendors is also valuable.

What Success Looks Like

First 30 days: Assess assigned environments, meet customer and delivery teams, validate critical documentation and access, and establish a prioritized risk register and clear ownership.

By 60 days: Lead engineering assignments and escalations for the agreed portfolio; apply consistent peer reviews, change plans, and handovers; and complete initial priority improvements.

By 90 days: Demonstrate reliable delivery and team coverage, maintain current documentation, and report measurable progress against agreed baselines for change success, recurring incidents, corrective actions, and project acceptance.