L3 Network Engineer

Lancesoft APAC; Cebu City; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Lancesoft APAC is seeking an experienced L3 Network Engineer to design, deploy, and support enterprise network infrastructure across on-premises and cloud environments. The role emphasizes SD-WAN, security, Azure networking, and branch provisioning, with strong troubleshooting and automation expectations.

The candidate will work in a fast-paced, ITIL-governed environment, supporting global teams and ensuring robust network performance across locations.

Qualifications

• 12+ years of network engineering experience in enterprise/cloud environments.
• Hands-on experience with SD-WAN, security, and wireless technologies.
• Strong troubleshooting and root cause analysis capabilities.
• Familiarity with ITIL-based service management processes and change management.

Responsibilities

• Design, deploy, and support enterprise network infrastructure across locations.
• Configure and optimize Cisco routing, switching, and wireless environments.
• Lead MDF/IDF design and deployment for new offices.
• Manage SD-WAN and security (FTD, VPN, firewall policies).
• Design and deploy Azure networking, VNets, ExpressRoute, and NVA deployments.
• Lead branch site provisioning and BOM validation with vendors and ISPs.
• Develop automation workflows (Ansible) and maintain network configs.
• Provide L3 escalation support and ensure ITIL-aligned incident/change processes.

Skills

Zscaler ZIA/ZPA

Silver Peak SD-WAN

Cisco FTD Firewalls

Cisco Catalyst 9300

Enterprise Routing & Switching

Azure Networking

Azure Landing Zone

Network Virtual Appliance

MDF/IDF Design

ITIL Process Knowledge

Troubleshooting & RCA

Change Management

Documentation & SOPs

Voice/VoIP (Cisco Avaya)

Education

CCNP Enterprise

AZ-700 (Azure Network Engineer)

ITIL Foundation Certification

Tools

Ansible Automation

Job description

Job Title: L3 Network Engineer

Shift Timings

US Shift: Monday to Friday, 11:00 AM to 8:00 PM EST or 8:00 AM to 5:00 PM EST Open for rotational shifts

Experience

12+ Years of Network Engineering Experience with strong expertise in Enterprise and Cloud Networking.

Job Summary

We are seeking an experienced L3 Network Engineer to join our Network Operations and Engineering team. The ideal candidate will be responsible for designing, deploying, troubleshooting, and supporting enterprise network infrastructure across on-premises and cloud environments. The role requires hands‑on expertise in SD-WAN, security, switching, wireless technologies, Azure networking, and branch provisioning. The candidate should possess strong troubleshooting skills, automation capabilities, and experience working within ITIL-based service management processes.

Key Responsibilities

Network Infrastructure Management

• Design, deploy, and support enterprise network infrastructure across multiple locations.
• Configure, troubleshoot, and optimize Cisco routing, switching, and wireless environments.
• Manage and support Cisco Catalyst 9300 Switch Stack deployments.
• Lead MDF and IDF design, setup, and commissioning activities for new office locations.

SD-WAN & Security

• Implement, manage, and troubleshoot Silver Peak (Aruba Edge Connect) SD-WAN solutions.
• Configure and support Cisco Firepower Threat Defense (FTD) Firewalls.
• Perform firewall policy management, VPN deployment, and security troubleshooting.
• Support internet edge security and secure remote connectivity solutions.

Azure Networking & Cloud

• Design and deploy Azure networking solutions.
• Implement Azure Landing Zones and Network Virtual Appliance (NVA) deployments.
• Manage:
  • Virtual Networks (VNets)
  • VNet Peering
  • VPN Gateways
  • ExpressRoute Connectivity
  • NSGs and Routing Policies

Branch Site Provisioning

• Lead end-to-end deployment of new branch locations.
• Prepare and validate Bill of Materials (BOM) for branch provisioning.
• Coordinate with vendors, ISPs, and internal stakeholders during implementation.
• Ensure successful WAN, LAN, Wireless, and Security deployments.

Monitoring & Automation

• Utilize enterprise monitoring tools for proactive incident detection and performance management.
• Develop and maintain automation workflows using Ansible.
• Support network configuration management and operational efficiency improvements.

Wireless & Collaboration

• Deploy and support Cisco Wireless and Meraki environments.
• Troubleshoot wireless performance and connectivity issues.
• Support Voice infrastructure including Cisco VoIP and Avaya VoIP systems (good to have).

IT Operations

• Participate in Incident, Problem, Change, and Service Request Management processes.
• Ensure compliance with ITIL framework and Change Management procedures.
• Prepare technical documentation, SOPs, implementation plans, and network diagrams.
• Provide L3 escalation support for critical network incidents and outages.

Mandatory Skills

• Zscaler Internet Access (ZIA) & Zscaler Private Access (ZPA)

• Silver Peak (Aruba Edge Connect) SD-WAN
• Cisco FTD Firewalls & FMC
• Cisco Catalyst 9300 Stack Switches
• Enterprise Routing & Switching
• Azure Networking
• Azure Landing Zone Deployments
• Network Virtual Appliance (NVA) Deployments
• MDF and IDF Design & Deployment
• Enterprise Network Monitoring Tools
• Ansible Automation
• New Branch Site Provisioning & Deployment
• BOM Preparation and Validation
• ITIL Process Knowledge
• Change Management Experience
• Strong Troubleshooting and Root Cause Analysis Skills

Preferred Skills

• Cisco Umbrella
• Cisco Wireless
• Cisco Meraki
• Cisco VoIP
• Avaya VoIP
• Infrastructure Automation and Scripting (Python Scripting)

Certifications

Mandatory

• CCNP Enterprise

Preferred

• Azure Network Engineer Associate (AZ-700)
• Cisco Security Certifications
• ITIL Foundation Certification

  Desired Candidate Profile

  • Strong analytical and troubleshooting skills.
  • Experience supporting large-scale enterprise networks.
  • Ability to work independently in a fast-paced operational environment.
  • Excellent communication and stakeholder management skills.
  • Experience working with global teams and supporting US business hours.
  • Strong documentation and implementation planning skills.

  Employment Type: Full-Time
  Work Model: WFO
  Shift: US Shift (9:00 AM to 6:00 PM EST, Monday-Friday) Open for rotational shifts
  Notice Period Preference: Immediate to 30 Days (Preferred)