Network Engineer

Black & White Engineering; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Black & White Engineering seeks a Network & Connectivity Specialist to design, operate and transform global network infrastructure across multiple sites. The role focuses on secure, resilient connectivity and transition to segmented Zero Trust architectures while collaborating with Infrastructure, Cyber Security, ITSM, and regional IT teams.

The successful candidate will manage FortiGate firewalls, SD-WAN, VPNs, and Azure networking, supporting hybrid and multi-cloud environments, with a

Qualifications

• Bachelor’s Degree in Information Technology, Computer Science, Computer Engineering, or a related discipline.
• Proven experience managing enterprise network infrastructure in a global or multi-site environment.
• Strong hands-on experience with FortiGate firewalls, FortiOS, SD-WAN, and VPN technologies.
• Strong understanding of enterprise networking concepts, including VLANs, routing, switching, OSPF, and BGP.
• Experience with Azure networking services, including VNets, NSGs, ExpressRoute, and Private Link.
• Experience designing and managing enterprise wireless networks.
• Understanding of Zero Trust architecture and SASE/SSE security concepts.
• Experience with network monitoring tools such as PRTG, SolarWinds, or equivalent.
• Strong knowledge of DNS, DHCP, and IP Address Management (IPAM).
• Experience troubleshooting complex network issues and performing root cause analysis.
• Understanding of ITIL change management processes.
• Experience automating network deployment or management activities through scripting.
• Strong documentation skills, including network diagrams, configurations, and technical designs.
• Excellent communication and stakeholder management skills with the ability to collaborate across global IT teams and external providers.

Responsibilities

• Design, implement, and maintain enterprise network infrastructure across global locations.
• Configure and manage network segmentation, including VLAN design and access controls.
• Manage FortiGate firewalls, FortiOS, SD-WAN, and VPN solutions.
• Support routing and switching environments, including OSPF, BGP, and enterprise network protocols.
• Monitor network performance using tools such as PRTG, SolarWinds, or equivalent platforms.
• Perform network troubleshooting, root cause analysis, and incident resolution.
• Follow ITSM change management processes to ensure controlled and reliable network changes.
• Design and manage Azure networking components, including VNets, subnets, Network Security Groups (NSGs), routing, and private endpoints.
• Support hybrid connectivity solutions, including site-to-site VPN and ExpressRoute.
• Support multi-cloud networking initiatives and optimise performance, scalability, and cost.
• Collaborate with cloud and infrastructure teams to ensure secure and reliable connectivity.

Skills

Enterprise networking concepts

FortiGate/FortiOS

OSPF/BGP

Azure networking

Zero Trust / SASE concepts

Network monitoring

Documentation

Stakeholder management

Education

Bachelor’s Degree in IT / CS / related

Tools

FortiGate

FortiOS

SD-WAN

VPN

Azure VNets/ExpressRoute/Private Link

NSG

ExpressRoute

PRTG/SolarWinds

IPAM

DNS/DHCP tools

Job description

Black & White Engineering is a multi-award-winning engineering consultancy with more than 1,100 employees across the UK, Europe, Middle East, and Asia Pacific.

We specialize in the full spectrum of engineering design consultancy for the data centre sector, including Mechanical, Electrical & Plumbing (MEP), Civil & Structural, Design Management, Sustainability, BIM, Power Systems, and other infrastructure-related services.

Our engineering expertise reaches across all sectors of the construction industry, providing pragmatic and practical design solutions that ensure projects are both spatially and operationally efficient. Our design process fully considers installation and maintenance practicalities on site.

Due to our continued growth, we are seeking a Network & Connectivity Specialist to support the design, operation, and transformation of Black & White Engineering’s global network infrastructure across multiple sites.

The successful candidate will play a key role in delivering secure, resilient, and high-performance connectivity while supporting the transition towards a segmented Zero Trust network architecture. Working closely with Infrastructure, Cyber Security, IT Service Management, Regional IT teams, and external technology providers, this position requires a technically skilled professional with strong networking expertise, problem-solving ability, and experience managing enterprise-scale environments.

This role combines hands-on network operations with strategic architecture, scalability, security improvements, and continuous performance optimisation to support global engineering operations.

Key Responsibilities

Network Operations & Infrastructure Management

• Design, implement, and maintain enterprise network infrastructure across global locations.
• Configure and manage network segmentation, including VLAN design and access controls.
• Manage FortiGate firewalls, FortiOS, SD-WAN, and VPN solutions.
• Support routing and switching environments, including OSPF, BGP, and enterprise network protocols.
• Monitor network performance using tools such as PRTG, SolarWinds, or equivalent platforms.
• Perform network troubleshooting, root cause analysis, and incident resolution.
• Follow ITSM change management processes to ensure controlled and reliable network changes.
• Design and manage Azure networking components, including VNets, subnets, Network Security Groups (NSGs), routing, and private endpoints.
• Support hybrid connectivity solutions, including site-to-site VPN and ExpressRoute.
• Support multi-cloud networking initiatives and optimise performance, scalability, and cost.
• Collaborate with cloud and infrastructure teams to ensure secure and reliable connectivity.

Wireless Network Management

• Design and optimise enterprise Wi-Fi solutions to support coverage, capacity, and performance requirements.
• Manage wireless controllers, firmware updates, and guest network access.
• Troubleshoot wireless connectivity issues and implement performance improvements.
• Ensure wireless environments align with security and operational standards.

Network Security & Zero Trust Architecture

• Support the implementation and evolution of Zero Trust network architecture.
• Design and maintain network segmentation based on least privilege principles.
• Support implementation of SASE/SSE security frameworks, including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA).
• Support the transition from traditional VPN access models towards modern identity-based access solutions.
• Collaborate with Cyber Security teams to identify threats, improve controls, and strengthen network security posture.
• Integrate identity-driven networking solutions using platforms such as Entra ID and Intune.

DNS, DHCP & IP Address Management

• Manage DNS and DHCP services across enterprise sites and cloud environments.
• Maintain IP addressing standards and IP Address Management (IPAM) processes.
• Perform capacity planning and ensure efficient allocation of network resources.
• Maintain accurate network records and documentation.

ISP & Connectivity Management

• Manage global ISP relationships, circuits, and connectivity services.
• Monitor network performance, availability, failover capabilities, and service level agreements.
• Coordinate with regional IT teams and external providers to resolve connectivity issues.
• Support new site deployments and connectivity requirements.

Capacity Planning & Performance Optimisation

• Monitor bandwidth utilisation and forecast future network requirements.
• Optimise network traffic through QoS, SD-WAN policies, and performance tuning.
• Identify opportunities to improve network reliability, efficiency, and scalability.
• Support the expansion of global network capabilities as the business grows.

Automation, Documentation & Standards

• Develop automation solutions using scripting to improve network deployment, monitoring, and management activities.
• Maintain accurate network documentation, including:
• Network diagrams
• Firewall configurations
• VLAN documentation
• Network standards
• High-level and low-level design documents
• Define and maintain network architecture standards aligned with ITSM governance.
• Ensure documentation supports operational excellence, compliance, and audit requirements.

Job Requirements

• Bachelor’s Degree in Information Technology, Computer Science, Computer Engineering, or a related discipline.
• Proven experience managing enterprise network infrastructure in a global or multi-site environment.
• Strong hands-on experience with FortiGate firewalls, FortiOS, SD-WAN, and VPN technologies.
• Strong understanding of enterprise networking concepts, including VLANs, routing, switching, OSPF, and BGP.
• Experience with Azure networking services, including VNets, NSGs, ExpressRoute, and Private Link.
• Experience designing and managing enterprise wireless networks.
• Understanding of Zero Trust architecture and SASE/SSE security concepts.
• Experience with network monitoring tools such as PRTG, SolarWinds, or equivalent.
• Strong knowledge of DNS, DHCP, and IP Address Management (IPAM).
• Experience troubleshooting complex network issues and performing root cause analysis.
• Understanding of ITIL change management processes.
• Experience automating network deployment or management activities through scripting.
• Strong documentation skills, including network diagrams, configurations, and technical designs.
• Excellent communication and stakeholder management skills with the ability to collaborate across global IT teams and external providers.