Network Engineer Lead 2

Globe Telecom, Inc.; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

GCash, a leading fintech in the Philippines, is seeking a Level 2 Enterprise Network Engineer to support and optimize our large enterprise network. You will work hands-on with routers, switches, firewalls, wireless systems, and VPNs, ensuring optimal performance and security across the environment.

You will collaborate with L3 engineers and security teams, perform root cause analysis, and contribute to capacity planning and network upgrades to sustain business needs.

Qualifications

• Proficient in L2/L3 protocols and VLANs; troubleshooting Ethernet, IP, TCP/IP, DNS, DHCP, ARP, BGP, OSPF.
• Experience configuring/maintaining enterprise routers and switches (Cisco, Juniper, Arista).
• Hands-on with firewalls (Cisco ASA, Palo Alto, Checkpoint, Fortinet) and VPNs (IPSec, SSL).
• Familiar with cloud networking concepts (VPN, SD-WAN, hybrid cloud in AWS/Azure/GCP).
• Experience with network monitoring tools (SolarWinds, Nagios, PRTG) and Wireshark for diagnostics.
• Certifications like CCNA/CCNP are required or highly preferred.

Responsibilities

• Provide L2 support for network incidents and escalation to L3 when needed.
• Monitor network performance and respond to alerts to ensure availability.
• Configure, install, and maintain routers, switches, firewalls, and VPN devices.
• Assist in network security management, policy troubleshooting, and vulnerability remediation.
• Document configurations, changes, and network diagrams; produce regular performance reports.
• Collaborate with cross-functional teams and mentor junior engineers.

Skills

Networking Protocols

Routing & Switching

Network Security

Wireless Networking

Network Management Tools

Cloud Networking

Education

CCNA Certification or equivalent

CCNP Certification preferred

Tools

SolarWinds

Nagios

PRTG

Wireshark

Job description

Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today! The Level 2 (L2) Enterprise Network Engineer is a technical role responsible for supporting and optimizing the network infrastructure of a large enterprise environment. This position involves hands‑on work with routers, switches, firewalls, wireless systems, and other critical network devices. The L2 Engineer ensures that the network infrastructure is performing optimally, troubleshoots complex network issues, implements necessary configurations, and supports higher‑level network engineers (L3) in the resolution of escalated incidents and planned network upgrades.

Key Responsibilities

1. 1. Network Support and Troubleshooting

   Incident Resolution:

   • Provide L2 support by responding to and resolving network‑related incidents, including issues with network devices (e.g., switches, routers, firewalls, and wireless access points), performance bottlenecks, connectivity issues, and service disruptions.
   • Escalation Support: Work closely with the Level 3 (L3) Network Engineers for more complex issues that cannot be resolved at the L2 level.
   • Root Cause Analysis: Perform root cause analysis on network issues, document findings, and provide recommendations for improvements. Ensure that all issues are resolved promptly with minimal business impact.

2. 2. Network Monitoring and Performance Management

   Proactive Monitoring:

   • Continuously monitor network performance using network management tools (e.g., SolarWinds, Nagios, PRTG). Monitor traffic loads, network availability, and device status to ensure the network is performing optimally.
   • Alerting and Remediation: Respond to alerts generated by network monitoring tools and resolve issues before they affect users or critical systems. Analyze performance data to identify potential risks and implement preventive measures.
   • Capacity Planning: Assist with identifying potential capacity issues and recommend hardware or configuration upgrades to meet business demands.

3. 3. Network Configuration and Installation

   Device Setup:

   • Configure, install, and maintain network devices, including routers, switches, firewalls, load balancers, and other network hardware as required. Ensure configurations are documented and aligned with company policies.

   Network Changes and Upgrades:

   • Implement network changes and updates, including firmware upgrades, patch management, and integration of new network technologies. Assist in large‑scale network deployments and migrations.

   Network Segmentation:

   • Assist in the creation and management of VLANs, subnets, and network segments to ensure proper network isolation and performance.

4. 4. Network Security

   Firewall and VPN Management:

   • Manage network security devices such as firewalls (Cisco ASA, Palo Alto, etc.) and VPN appliances. Configure VPN access for remote users and branch offices to ensure secure communication.

   Access Control:

   • Maintain and troubleshoot access control policies on switches, routers, and firewalls to ensure compliance with corporate security policies and industry best practices.

   Vulnerability Management:

   • Collaborate with the security team to identify network vulnerabilities and assist in implementing security patches and updates.
   • Configure and manage enterprise firewall solutions, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
   • Ensure network compliance with security policies and industry standards (e.g., BSP, SPECS, PCI DSS).
   • Implement VPN solutions (site‑to‑site and remote access) for secure connectivity. Regularly audit and assess network security, perform penetration tests, and address vulnerabilities.

5. 5. Documentation and Reporting

   Network Documentation:

   • Maintain comprehensive and up‑to‑date network documentation, including device configurations, network diagrams, IP addressing schemes, and change logs.

   Reporting:

   • Generate regular reports on network performance, incident response times, and other relevant metrics.
   • Prepare post‑incident reports and provide recommendations for future network improvements.

   Change Management:

   • Support the change management process by documenting and reviewing planned network changes, ensuring they align with organizational policies and minimizing risk to network operations.

6. 6. Collaboration and Knowledge Sharing

   Team Collaboration:

   • Collaborate with cross‑functional teams, including system administrators, security teams, and application support teams, to ensure network issues are addressed and resolved quickly.

   Knowledge Sharing:

   • Share knowledge of network troubleshooting techniques and best practices with junior engineers and other team members.
   • Provide training and mentorship to less experienced staff.
   • Project Participation: Support network projects, including new network infrastructure deployments, migration projects, and technology upgrades. Ensure that these projects are executed on time and within scope.

Qualifications

1. Networking Protocols

   • Proficient in L2/L3 protocols (e.g., Ethernet, IP, TCP/IP, DNS, DHCP, ARP, BGP, OSPF, VLAN, QoS, and MPLS).

2. Routing and Switching

   • Strong experience with configuring and troubleshooting enterprise routers and switches (Cisco, Juniper, Arista, etc.).

3. Network Security

   • Hands‑on experience with firewalls (Cisco ASA, Palo Alto, Checkpoint, Fortinet), VPNs (IPSec, SSL), and network access control devices.

4. Wireless Networking

   • Familiarity with wireless technologies (Wi‑Fi, WAP, WLAN configurations, site surveys).

5. Network Management Tools

   • Experience with network monitoring and diagnostic tools such as SolarWinds, Nagios, PRTG, and Wireshark.

6. Cloud Networking

   • Familiarity with cloud networking concepts, including VPN, SD‑WAN, and hybrid cloud infrastructures (AWS, Azure, GCP).

7. Certifications

   • Required: Cisco Certified Network Associate (CCNA) or equivalent networking certifications.
   • Preferred: Cisco Certified Network Professional (CCNP) or equivalent certifications in network technologies.
   • Additional: CompTIA Network+, Juniper Networks Certified Associate (JNCIA), or similar certifications are a plus.

What We Offer

Opportunity for career growth and development in the #1 FinTech company in the country Working with a dynamic and highly collaborative team who want to change the game A company that values their people with highly competitive and flexible compensation and benefits package is the #1 Finance App in the Philippines. Through the GCash App, 81M registered users can easily purchase prepaid airtime; purchase from over 6M partner merchants and social sellers; send and receive money anywhere in the Philippines, even to other bank accounts; pay bills at over 1,800 partner billers nationwide; and get access to savings, credit, loans, insurance and investments, and so much more, all at the convenience of their smartphones.

GCash is a wholly‑owned subsidiary of Mynt (Globe Fintech Innovations, Inc.) since 2015. Mynt, Inc. is the parent company of GCash, the Philippines’ #1 finance superapp, advancing financial inclusion through ‘Finance for All’. G‑Xchange, Inc. (GXI) is the payments company for GCash. GXI is a BSP‑licensed e‑money issuer responsible for the digital payments and electronic money activities in the GCash app. Fuse Financing, Inc. is the financing company for GCash. Fuse provides eligible users with access to fair and digitally‑enabled credit products and solutions. Ryse, Inc. broadens access to investments that are easy to use and understand, supporting wealth‑building for Filipinos at different stages of their financial journey. BlockG Virtual Assets, Inc. supports responsible participation in digital assets, helping build trust and long‑term confidence in the continuously evolving digital landscape.