Senior Network Engineer (ASAP Joining)

IT by Design Philippines Inc.; Taguig; Remote; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

HMO coverage

Life Insurance

Night Differential

13th Month Pay

Free meals, coffee & snacks

Job summary

IT By Design Philippines Inc. seeks a Sr. Network Engineer to act as the escalations resource, resolving complex incidents and keeping client networks secure and available. The role emphasizes hands-on Cisco and Fortinet operations, including SD-WAN and VPN, with AWS networking and Meraki integration.

The candidate will participate in on-call rotations, after-hours support, and documentation. Strong Spanish and English communication is required for multi-client coordination and remote teamwork.

Qualifications

• 3–5+ years of enterprise network engineering experience.
• Deep hands-on Cisco and Fortinet FortiGate with SD-WAN and VPN.
• CCNA certification required.
• Production AWS networking experience in a hybrid environment.
• Fluency in Spanish and English.
• Strong documentation and troubleshooting skills.
• Willingness to join after-hours on-call rotations and onsite night shift in BGC.
• Ability to work independently in a remote team.

Responsibilities

• Escalation & Incident Resolution: manage tickets and resolve issues within SLA.
• Network Engineering & Design: deploy and maintain Cisco infrastructure and QoS.
• Security, SD-WAN & VPN: manage FortiGate, SD-WAN, site-to-site VPNs.
• Cisco Meraki: deploy MX, configure SD-WAN, and integrate with MS/MR.
• AWS Networking: design VPCs, private connectivity, and cloud security.
• Documentation & Team Support: maintain runbooks and shift handoffs.

Skills

Cisco networking

Fortinet FortiGate (SD-WAN/VPN)

Cisco Meraki MX

AWS networking

Spanish & English fluency

Documentation & troubleshooting

On-call readiness

Remote work independence

Education

CCNA certification

Bachelor's degree in IT/CS

Associate degree in IT

Tools

Cisco Meraki MX

Cisco ISE

Azure networking

ConnectWise

SolarWinds

PRTG

N-central

Job description

Job Description

Sr. Network Engineer

Position Summary

We are seeking a highly skilled, dependable, and accountable Network Engineer to serve as our network escalation resource, resolve complex incidents, and keep critical client infrastructure secure and operational.

This is not a traditional help desk role. You will play a key part in maintaining stability, security, and uptime across managed-services clients, from incident resolution to approved changes and infrastructure projects.

The ideal candidate brings deep hands-on expertise in Cisco networking and Fortinet FortiGate (including SD-WAN and VPN), with Cisco Meraki MX, AWS networking, and Cisco ISE as strong secondary skills. This remote role requires bilingual proficiency in Spanish and English, participation in the on-call rotation, availability for after-hours support, and strong documentation skills.

Key Responsibilities

Escalation & Incident Resolution

• Manage assigned network and security tickets from the support queue, meeting response and resolution targets (SLAs).
• Take escalations from Tier 1 and Tier 2 staff, resolve them remotely, and document root cause and fixes.
• Respond to monitoring alerts (link down, VPN tunnel failure, high utilization, HA failover) and coordinate with carriers and vendors (Cisco TAC, Fortinet TAC, AWS Support).
• Perform approved changes during scheduled maintenance windows with documented implementation, rollback, and validation steps.

Network Engineering & Design (Cisco)

• Design, deploy, configure, and maintain Cisco infrastructure, including Catalyst and Nexus switching, ISR/Catalyst routing, and LAN/WAN environments.
• Implement segmentation and routing using VLANs, VRFs, OSPF, BGP, EIGRP, HSRP/VRRP, and QoS.
• Perform network upgrades, migrations, and capacity planning.
• Troubleshoot complex connectivity, performance, and stability issues across multi-site environments.

Security, SD-WAN & VPN (Fortinet FortiGate)

• Deploy and manage FortiGate firewalls, including policies, NAT, security profiles, and SSL inspection.
• Design and operate Secure SD-WAN, including zones, health checks, application-aware rules, and link failover.
• Build and maintain site-to-site IPsec VPNs (including ADVPN) and remote-access VPN with MFA.
• Use FortiManager and FortiAnalyzer for centralized policy management, logging, and reporting.
• Maintain firmware lifecycle, HA clusters, and configuration backups.

Cisco Meraki MX

• Deploy and manage MX appliances through the Meraki Dashboard, including templates, firewall rules, and content filtering.
• Configure Auto VPN topologies, SD-WAN traffic shaping, and WAN failover across dual-ISP and cellular uplinks.
• Integrate MX with Meraki MS switching and MR wireless.

AWS Networking

• Design and manage VPCs, subnets, route tables, gateways, Security Groups, and Network ACLs.
• Configure hybrid connectivity using Site-to-Site VPN, Transit Gateway, and Direct Connect.
• Support PrivateLink, Route 53, Elastic Load Balancing, and AWS Network Firewall.
• Troubleshoot cloud traffic using VPC Flow Logs, CloudWatch, and Reachability Analyzer.

Network Access Control (Cisco ISE)

• Deploy and manage ISE for 802.1X, MAB, and policy enforcement.
• Integrate with Active Directory and certificate services.
• Configure profiling, posture, guest/BYOD onboarding, TrustSec/SGT segmentation, and TACACS+.

Additional Support Areas

• Support Azure networking (VNets, NSGs, VPN Gateway) for multi-cloud clients.
• Troubleshoot Windows Server, Active Directory, DNS, and DHCP.
• Maintain virtual networking in VMware vSphere and Nutanix AHV.

Documentation & Team Support

• Create and maintain network diagrams, runbooks, configuration records, and troubleshooting guides.
• Provide clear shift handoff notes and status updates to the supervisor.
• Mentor technicians through knowledge-base articles, runbooks, and informal training.

On-Call & Shift Coverage

• Participate in the on-call rotation for critical after-hours network incidents.
• Work an assigned schedule that may include evenings, weekends, or holidays.

What Success Looks Like

• Tickets and escalations resolved within SLA with clear root-cause documentation.
• Changes completed cleanly with no unplanned outages.
• Stable, secure, and resilient client networks.
• Organized, audit-ready documentation and change records.
• Clear handoffs, with the team always knowing where work stands.
• Fewer repeat issues thanks to knowledge sharing and proactive prevention.

Must-Have Qualifications

• 3–5+ years of experience in network engineering, focused on enterprise design, security, and SD-WAN.
• Deep hands-on expertise in Cisco networking (IOS/IOS-XE, NX-OS) and Fortinet FortiGate (SD-WAN, VPN, HA).
• Cisco CCNA certification.
• Production experience with AWS networking in a hybrid environment.
• Fluency in Spanish and English, with excellent written and verbal communication.
• Strong troubleshooting skills using packet captures, logs, and flow data.
• Strong documentation skills.
• Ability to work independently in a remote team and keep tickets and handoff notes current.
• Availability for on-call rotation and after-hours support.
• Availability to work onsite, nightshift (BGC)

Preferred Experience

• Cisco Meraki MX, Cisco ISE, and Azure networking experience.
• Experience with Windows Server, AD, DNS, DHCP, and VMware/Nutanix networking.
• Experience in an MSP or managed-services environment.
• Familiarity with PSA/ticketing and monitoring tools such as ConnectWise, SolarWinds, PRTG, or N-central.
• Associate’s or Bachelor’s degree in IT, Computer Science, or related field.
• Certifications: CCNP, Fortinet FCP (NSE 4), AWS Solutions Architect Associate or Advanced Networking Specialty, Fortinet FCSS SD-WAN, Meraki CMSS, Cisco ISE (SISE 300-715), AZ-700, Network+/Security+, VCP/NCP.

Benefits

• HMO coverage effective Day 1 of employment with free dependent
• Life Insurance
• Pet Insurance
• Night Differential
• Holiday Pay
• Government-Mandated Benefits
• Annual Performance Review and Bonus
• 13th Month Pay
• Free Meal, Coffee & Snacks

About IT By Design

IT By Design (ITBD) is a global leader in engineering talent solutions, AI transformation programs, and growth enablement services for Managed Service Providers (MSPs). With 800+ employees across the US, India, and the Philippines, we help MSPs scale capacity, improve capability, and operate with clarity.