Senior Network Engineer

Ampstek; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

Ampstek is seeking a senior network engineer to design and deploy IT network solutions across on‑premise and cloud environments. You will engage with stakeholders, collaborate with architects, and create detailed design documentation and change plans.

The role includes 3rd level technical support, vendor escalation, and post-upgrade verification to ensure stable network operations. Candidates should have 5+ years in network/IT design, certifications in DDI/Security, and hands-on experience with

Qualifications

• Information Technology or Engineering Degree, Technical Certification or equivalent minimum 5 years of industry experience in the Network/IT field designing and engineering
• Vendor-based DDI and Security Certifications eg EfficientIP, Infoblox, Fortinet, Checkpoint
• AWS/Google/Azure Architecture, Network and/or Security specialty Certifications
• CISSP or other Cybersecurity certification

Responsibilities

• Engage with Business stakeholders on network design and upgrades
• Consult with Architects and Designers on infrastructure solutions
• Create and maintain design documentation and change plans
• Provide 3rd level technical support for complex networking issues
• Plan upgrade testing and stakeholder engagement
• Assist with network change requests and post-upgrade handover

Skills

Networking

Security

AWS

Azure

Terraform

Ansible

Cisco

DNS/DHCP

OSPF/BGP

Cloud networking

Education

Info Tech Degree

Technical Certification

5+ years experience

Tools

EfficientIP

Infoblox

Route53

GCP

Job description

Design and deployment of IT network solutions in both on-premise and Cloud connected components.

Responsibilities

• Engage with Business stakeholders on
• Consultation with Network/Security/Application Architects and Designers
• Creation and upkeep of technical infrastructure solutions and Design documentation
• Detailed Configuration and System Integration Change Plans and implementation
• Peer reviews and the ensuring the lack of unplanned disruption caused by new work.
• Root Cause Analysis (RCA) and Problem Incident Review (PIR) for network security
• Consultation for IT network project design and delivery or support for complex problems and requirements.
• Providing escalated (3rd level) technical support and analysis to help drive fault rectification of high impact business or complex technical issues related to networking equipment and services.
• Escalating problems to vendors, identifying and implementing fixes/workaround
• Carry out pre-upgrade testing, staging and lab testing as applicable
• Work with the Project Manager, Network Engineer and Change Coordinator on upgrade planning and stakeholder engagement
• Assist in planning network change requests, including dates, windows, stakeholders and approvals
• Undertake network change requests. Typically beginning after 7-11pm and of 1-6 hours duration depending on complexity and risks.
• Troubleshooting and resolution of any issues arising from upgrade, including escalation to the vendor if necessary and related follow up actions
• Network Operational Handover and resolution of any operational handover acceptance issues if identified.
• Prepare all necessary Operational Handover documentation and artefacts and work with Operations on any outstanding issues to ensure successful Operational Acceptance based
• Assist with any work-aids, instructions to network element provisioning as needed to cater for the upgraded version
• Provide feedback and insight into ongoing upgrade planning to ensure learnings are passed on to ensure future success and productivity is maximised.

Education/Qualifications/Certifications that will be highly regarded

• Information Technology or Engineering Degree, Technical Certification or equivalent minimum 5 years of industry experience in the Network/IT field designing and engineering
• Vendor-based DDI and Security Certifications eg EfficientIP, Infoblox, Fortinet, Checkpoint
• AWS/Google/Azure Architecture, Network and/or Security specialty Certifications
• CISSP or other Cybersecurity certification

Technical/Professional Skills

Extensive hands on and technical specialist skills in the design and configuration of networking security infrastructure, including the ability to support and integrate a variety of technologies and services.

Expert knowledge of LAN, WAN and Data Centre network integration techniques and enterprise design.

Good knowledge of Software Defined Networks (SDN) and Cloud technologies across the major three providers AWS, Azure and GCP.

Expert design and configuration skills in:

• Network routing and switching technologies and platforms, particularly Cisco
• Azure, Google and AWS IaaS (Networking services e.g. Direct Connect, Express Route, Partner Interconnect, VPC, vNet, Transit Gateway, vWAN & vHub)
• Orchestration/automation/IaC tools such as Ansible or Terraform, GitLab
• IP Network routing - OSPF, BGP
• DNS and DHCP protocols
• Network Address Translation (NAT)
• API integration and management

As well as a good understanding of:

• Physical and virtual server configuration
• A DDI (DNS/DHCP/IP Address Management) product, most beneficially this being EfficientIP, but also Infoblox, Bluecat or other
• Cloud DNS services such as Route53 or equivalent
• Algosec FireFlow/Firewall Policy Management or equivalent technologies
• Firewall platform hardware, virtualisation, software, management and logging in order of preference by vendor: 1. Fortinet 2. Checkpoint 3. Other major firewall vendor e.g. Palo Alto,
• Cisco
• Firewall Policy design and implementation