L3 Network Engineer

Lancesoft Philippines; Metro Manila; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Lancesoft Philippines is seeking an experienced network engineer to design, deploy, and manage enterprise network infrastructure across multiple sites in the Philippines. The role emphasizes Cisco routing/switching, SD-WAN, and Azure networking, with a strong focus on security, automation, and ITIL-aligned processes.

You will lead end-to-end site provisioning, collaborate with ISPs and vendors, and contribute to documentation, BOMs, and ongoing optimization.

Qualifications

• CCNP Enterprise certification is mandatory.
• Experience designing and deploying enterprise network infrastructure across multiple locations.
• Familiarity with ZIA/ZPA and Azure networking is preferred.

Responsibilities

• Design, deploy, troubleshoot, and support enterprise network infrastructure across multiple locations.
• Configure and support Cisco routing, switching, wireless, and Catalyst 9300 switch stacks.
• Lead end-to-end new branch site provisioning, including WAN, LAN, Wireless, and Security.
• Prepare and validate BOMs and coordinate with ISPs, vendors, and internal stakeholders.
• Develop and maintain network automation workflows using Ansible.
• Monitor enterprise networks and provide L3 escalation support, RCA, and resolution for incidents.
• Follow ITIL-based Incident, Problem, Change, and Service Request Management.
• Create and maintain network diagrams, SOPs, implementation plans, and technical documentation.

Skills

Network design

Troubleshooting

L3 escalation

ITIL processes

Documentation

SD-WAN

Vendor coordination

Branch site provisioning

Network security basics

Education

CCNP Enterprise

Cisco Security Certifications

ITIL Foundation

Zscaler Certifications

Tools

Ansible

FMC

ZIA/ZPA

Azure Networking

ExpressRoute

NVA Deployments

Job description

• Design, deploy, troubleshoot, and support enterprise network infrastructure across multiple locations.
• Configure and support Cisco routing, switching, wireless, and Catalyst 9300 switch stacks.
• Design and commission MDF/IDF infrastructure for new office locations.
• Implement and troubleshoot Silver Peak (Aruba Edge Connect) SD-WAN.
• Configure and support Cisco FTD Firewalls and FMC, including firewall policies and VPNs.
• Design and deploy Azure Networking solutions, including Azure Landing Zones and NVAs.
• Manage Azure VNets, VNet Peering, VPN Gateways, ExpressRoute, NSGs, and routing policies.
• Lead end-to-end new branch site provisioning, including WAN, LAN, Wireless, and Security.
• Prepare and validate BOMs and coordinate with ISPs, vendors, and internal stakeholders.
• Develop and maintain network automation workflows using Ansible.
• Monitor enterprise networks and proactively identify performance and availability issues.
• Provide L3 escalation support, troubleshooting, RCA, and resolution for critical incidents.
• Follow ITIL-based Incident, Problem, Change, and Service Request Management processes.
• Create and maintain network diagrams, SOPs, implementation plans, and technical documentation.

Zscaler Internet Access (ZIA) & Zscaler Private Access (ZPA)

Network Virtual Appliance (NVA) Deployments

Certifications

Mandatory:

• CCNP Enterprise

Preferred:

• Cisco Security Certifications
• ITIL Foundation
• Zscaler Certifications