Network Engineer

Curium Pharma; Saclay; Sur place; EUR 55 000 - 75 000; Plein temps

Résumé du poste

Curium Pharma is seeking a network engineer to secure and optimize enterprise and OT connectivity across sites and cloud platforms. You will operate LAN/WAN/SD‑WAN, wireless, VPNs, firewalls, load balancers, DNS/DHCP/IPAM, and monitoring, ensuring 24x7 support within SLAs.

You will participate in changes and migrations, own troubleshooting, implement changes, and contribute to runbooks and documentation while collaborating with Curium teams and external providers.

Qualifications

• 3–5+ years in network operations for multi-site enterprise.
• Hands-on with Cisco routing/switching (BGP, OSPF, VRRP/HSRP).
• Fortinet firewalls and remote access (VPN IPsec/SSL).
• Azure networking: VNets, ExpressRoute, Firewall/NVA.
• DNS/DHCP/IPAM and IP addressing discipline.
• Experience with ITIL Incident, Problem, and Change management.
• On-call rotation and 24×7 critical-services support.
• Clear communication to technical and non-technical stakeholders.
• Runbooks/diagrams documentation discipline.

Responsabilités

• Monitor and operate global network services across data centers and Azure.
• Run day-to-day on Fortinet NGFW/SD‑WAN, Cisco switching/wireless, and Azure networking.
• Own L2 troubleshooting and root-cause analysis; drive post-incident reviews.
• Implement approved changes; maintain configuration baselines and backups.
• Provide network access provisioning (VLANs, ACLs, VPNs) per security standards.
• Publish availability, latency, and capacity KPIs from monitoring tools.
• Coordinate with providers/MSPs for circuits and managed services.
• Support DR/BCP readiness, failover testing, and resilience improvements.
• Contribute to project delivery: requirements, design input, test plans, cutsovers.

Connaissances

Cisco routing/switching

Fortinet firewalls

Azure networking

ITIL processes

L2 troubleshooting

On-call support

Documentation

Network monitoring

Formation

Bachelor's degree in Computer Science/IT

Outils

Ansible

Terraform

Description du poste

Ensure secure, reliable, and performant enterprise and plant (OT) network connectivity across Curium sites and cloud platforms. Operate and improve LAN/WAN/SD‑WAN, wireless, remote access/VPN, firewalls, load balancers, DNS/DHCP/IPAM, and network monitoring, following approved change, incident, and problem processes. Participate in projects to deliver network changes and migrations, and take part in the on‑call rotation to support 24×7 critical services within defined SLAs.

Job description:

Summary of Position

Ensure secure, reliable, and performant enterprise and plant (OT) network connectivity across Curium sites and cloud platforms. Operate and improve LAN/WAN/SD‑WAN, wireless, remote access/VPN, firewalls, load balancers, DNS/DHCP/IPAM, and network monitoring, following approved change, incident, and problem processes. Participate in projects to deliver network changes and migrations, and take part in the on‑call rotation to support 24×7 critical services within defined SLAs.

Essential Functions

• Monitor and operate global network services (LAN, WAN/SD-WAN, Wi‑Fi, remote access/VPN, firewalls, proxies, DNS/DHCP/IPAM) across data centers, sites, and Azure cloud.
• Run day‑to‑day on Fortinet NGFW/SD‑WAN, Cisco switching/wireless, and Azure networking (VNets, VPN/ExpressRoute, Azure Firewall/NVA).
• Own L2 troubleshooting for incidents and performance degradations; drive root‑cause analysis and contribute to post‑incident reviews.
• Implement approved changes and releases; maintain configuration baselines, backups, and standard builds.
• Provision and maintain network access (VLANs, ACLs, firewall rules, site‑to‑site VPNs, NAC/802.1X) in line with security standards.
• Operate and tune monitoring/observability (SNMP, Syslog, NetFlow/sFlow, telemetry); publish availability, latency, and capacity KPIs.
• Create and maintain runbooks, diagrams, and inventory (IPAM); keep documentation audit‑ready.
• Coordinate with providers/MSPs and carriers for circuits and managed services; track service quality and elevate per OLAs.
• Support DR/BCP network readiness, failover testing, and resilience improvements.
• Contribute to project delivery: requirements, design input, test plans, pilot/rollout/migration support, and cutover readiness.
• Automate repetitive tasks (Python/PowerShell/Ansible) and propose continuous improvements.
• Participate in the on‑call rota; respond to major incidents, provide timely comms/handovers, and meet response/restore SLAs.

Requirements

Must have Experience/Skills

• 3–5+ years in network operations supporting multi‑site enterprise environments.
• Hands‑on with Cisco routing/switching (BGP, OSPF, VRRP/HSRP, VLANs, STP) and Wi‑Fi.
• Fortinet firewalls and remote access: policies/objects, NAT, VPN (IPsec/SSL), segmentation/micro‑segmentation.
• Azure networking: VNets/subnets, route tables, network security groups, Azure Firewall/NVA, VPN/ExpressRoute.
• Network services: DNS, DHCP, NTP; IP addressing and IPAM discipline.
• Monitoring/observability tools (SNMP, Syslog, NetFlow) and packet analysis.
• Operating within ITIL processes for Incident, Problem, and Change; experience in CAB participation.
• Evidence of participation in an on‑call rotation and 24×7 support of critical services.
• Strong L2 troubleshooting, structured analysis, and clear communication to technical and non‑technical stakeholders.
• Documentation discipline (runbooks, diagrams) and adherence to security/quality standards.
• Collaboration mindset consistent with Curium values (Integrity, Commitment, Collaboration).
• English proficiency (written and spoken); French, Italian, Spanish is a plus.

Nice to have Experience/Skills

• Certifications: Cisco CCNA/CCNP, Fortinet NSE 4–7, Microsoft AZ‑700/Azure Network Engineer Associate.
• Network automation and infrastructure‑as‑code (Ansible, Terraform), CI/CD for network configurations.
• Zero Trust/SASE, NAC (802.1X), wireless site design; proxy/load‑balancer experience.
• Experience in regulated/GxP environments and audit readiness.

Education

• Bachelor’s degree in Computer Science, Information Technology, or equivalent experience. Relevant vendor or industry certifications preferred.

Competencies