Lead Network Engineer

APWtech; Cebu City; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

APWtech in Cebu City seeks a Lead Network Engineer to own the infrastructure that powers two busy offices. You’ll design, implement, and optimize on-premises and cloud networks, ensuring reliable connectivity and scalable performance.

The ideal candidate has 3–5 years of hands-on experience, excels at diagnosing complex issues, writing runbooks, and communicating clearly with technical and non-technical teams. Hybrid work with strong automation is preferred.

Qualifications

• 3–5 years of hands-on IT infrastructure experience in medium to enterprise-scale environments.
• Experience designing, implementing, and optimizing IT infrastructure.
• Ability to translate complex concepts for technical and non-technical users.
• Hybrid on-prem and cloud environments with automation and documentation.

Responsibilities

• Tune network setups for multi-ISP failover and VPN routing with reliable onsite connectivity.
• Lead Level 3 diagnostics and root-cause analysis to ensure permanent resolutions.
• Design efficient, resilient on-premises and multi-site networks with automation for high availability.
• Own runbooks and maintain documentation to enable repeatable operations.
• Liaise with 3rd-party providers to ensure swift resolutions and clear communication.

Skills

Network Architecture

WAN & VPN

Hybrid IT

Documentation

Automation

Tools

Microsoft 365

SharePoint Online

Exchange Online

Microsoft Teams

AWS

Job description

We’re looking for a Lead Network Engineer to take full ownership of the infrastructure supporting our two high-energy offices. If you see a well-configured enterprise firewall as a work of art and you possess the Sharepoint skills to transform a chaotic digital workspace, we should talk.

In this role, you aren’t just maintaining systems; you are building the foundations that allows our teams to scale without friction.

Your Role

• Network Craftsmanship: You’ll tune our network setups for multi-ISP failover and complex outbound VPN routing, ensuring 100% wireless coverage and network reliability for our on-site teams.
• Level 3 Infrastructure Sovereignty: You are the authority for high-level issues across our infrastructure. You perform deep-dive diagnostics and log analysis to validate root causes, ensuring problems are solved permanently.
• Infrastructure & Network Mastery: You will design efficient and resilient on-premises and multi-site network infrastructure, implement automation, optimize performance, and ensure high availability and reliability across all network environments.
• Operational Excellence: You own the runbooks. You maintain the documentation and procedures that make our operations repeatable and scalable. You hit your marks (SLA) through automation and efficiency, not by rushing.
• Vendor Diplomat: You act as the technical liaison when 3rd-party providers drop the ball. You speak their language and you ensure swift resolutions.

Who You Are

• The Experienced IT Guru: You bring 3 to 5 years of hands-on experience designing, implementing, and optimizing IT infrastructure in medium to enterprise-scale environments.
• Hybrid Savvy: You're equally comfortable managing both on-premises and cloud environments. From enterprise network infrastructure to public cloud platforms, you can confidently deploy, troubleshoot, optimize, and maintain complex systems.
• The Reliable Pro: You value your work-life balance, which is why you build resilient, automated systems that don’t require 3 AM interventions.
• A Tech Communicator: You can translate complex concepts into clear, easy-to-understand language for both technical and non-technical users.
• Documentation Evangelist: You believe that a clear runbook is a gift to your future self and a requirement for a scalable team.
• A Log Whisperer: You enjoy looking at logs to find the "Why" behind an incident.
• WAN & Connectivity: WAN architecture, multi-ISP management, SD-WAN, and site-to-site connectivity across multiple office locations.
• Routing & Firewall: Enterprise routing, firewall administration, VPNs, network segmentation, high availability (HA), and network security.
• Switching & Wireless: Enterprise switching, wireless networking, VLANs, wireless security, and access point management.
• Cloud Platforms: Public cloud infrastructure management, infrastructure-as-code, and cloud networking
• Identity & Security: Experience with identity and access management, secure authentication, access controls, and security practices that help protect systems, applications, and user accounts.
• Nice-to-have: Microsoft 365, SharePoint Online, Exchange Online, Microsoft Teams, AWS (EC2, S3, IAM, EKS, Lambda, and Billing)