Network Integration & Implementation Engineer

PMCL-JAZZ; Islamabad; On-site; PKR 1,800,000 - 2,800,000; Full time

Job summary

JazzWorld in Islamabad is seeking a Network Integration & Implementation Engineer to build, integrate and migrate customer networks across firewalls, secure remote access, SD-WAN and wireless.

You will work with public-sector, financial services and large enterprises, delivering secure, well-documented deployments across multi-vendor environments, including live changes and nationwide rollouts. A CCNP or equivalent is encouraged; 5+ years of experience required.

Qualifications

• 5+ years of network and network-security engineering experience.
• Bachelor’s degree in Information Technology, Computer Science or related engineering field.
• Experience delivering SD-WAN rollouts across multiple sites.
• Hands-on expertise with multi-vendor firewalls (Cisco ASA/FTD/FMC, Palo Alto NGFW, FortiGate, Huawei).

Responsibilities

• Deploy and configure multi-vendor next-gen firewalls with policies, NAT, VPNs and threat prevention.
• Implement network access control using NAC solutions and MFA across devices.
• Deliver SD-WAN rollouts and branch-scale network deployments.
• Integrate cloud networking (AWS/Azure) with on-premise networks.
• Provide handovers to managed services with documentation and runbooks.
• Coach junior engineers and support TAC escalations.

Job description

Title: Network Integration & Implementation Engineer

Grade: L2

Location: Islamabad

Company: JazzWorld

JazzWorld is Pakistan’s fastest-growing digital ecosystem, spanning connectivity, financial services, entertainment, lifestyle, enterprise and software services. As Network Integration & Implementation Engineer, you will build, integrate and migrate customer networks across firewalls, secure remote access, network access control, SD-WAN, enterprise wireless, routing and switching. Working with public-sector, financial-services and large-enterprise customers, you will deliver secure, well-documented implementations across multi-vendor environments, including live production changes and nationwide deployments.

What you’ll own

• Deploy and configure multi-vendor next-generation firewalls, including access policies, NAT, site-to-site and remote-access VPNs, IPS and threat prevention.
• Implement and upgrade network access control using Cisco ISE or equivalent, including 802.1X, MAB, TACACS+, RADIUS, device administration and MFA across mixed-vendor switching.
• Deliver branch-scale SD-WAN rollouts, including site onboarding, policy configuration, data-centre integration and cutover.
• Deploy multi-site enterprise wireless with identity-based access and guest services, and refresh routing and switching across VLAN segmentation, inter-VLAN routing, redundancy and high availability.
• Integrate AWS and Azure cloud networking and security, including hybrid connectivity where required.
• Develop implementation plans, methods of procedure, migration steps and rollback plans aligned with statements of work and approved designs.
• Execute firewall migrations, platform upgrades and technology refreshes in live production, with defined fallbacks, validation criteria and customer acceptance testing.
• Troubleshoot project and managed-services network/security incidents using firewall logs, VPN sessions and authentication events; support root-cause analysis, vulnerability assessment and audit remediation.
• Complete handovers to managed services with accurate as-built records, runbooks, monitoring details and knowledge transfer; work with OEMs, distributors and partners on technical escalations and TAC cases.
• Coach junior engineers on implementation and documentation standards, and support Solutions Engineering with effort estimates and bill-of-materials checks when required.

What success looks like

• Implementation documentation—including MOPs, rollback plans and as-builts—is complete and meets practice standards for every assigned project.
• Assigned projects reach customer acceptance without customer-impacting rollback.
• Changes are supported by documented fallbacks, pre- and post-change validation, user acceptance testing and customer sign-off.
• Managed-services handovers are complete, with no repeat escalations caused by missing documentation.
• Network and security incidents are investigated methodically, with clear support for root-cause analysis and remediation.
• The engineer becomes a recognised practice resource in at least one area: firewall, NAC or wireless integration.
• If not already held, a full CCNP Enterprise or CCNP Security certification is completed within six months of joining; Jazz will fund the exam fees.

You may be a strong fit if you:

• Bring 5+ years of network and network-security engineering experience, including at least 3 years delivering enterprise projects in a systems integrator, service-provider or managed-services environment.

• Hold a Bachelor’s degree in Information Technology, Computer Science, Electrical or Electronics Engineering, Telecommunications or a related discipline.

• Have delivered SD-WAN rollouts across 100+ sites through customer acceptance, Cisco ISE or equivalent NAC deployments/upgrades for banks or large enterprises, multi-site identity-based wireless deployments, and live-production firewall migrations.

• Have hands-on expertise with Cisco ASA/FTD/FMC, Palo Alto NGFW/Panorama, FortiGate or Huawei firewalls, including policy, NAT, IPsec/SSL VPN, IPS and threat prevention.

• Understand Cisco ISE, 802.1X, TACACS+, RADIUS, device administration and MFA; Cisco Meraki or Palo Alto SD-WAN; and Cisco Catalyst 9800, Aruba or Huawei wireless controllers with guest access and RADIUS integration.

• Bring routing and switching experience with Cisco Catalyst, Nexus, ISR/ASR and 8000 series, Huawei or H3C switching, L2/L3 design, VLANs, routing and high availability; AWS/Azure cloud networking is an advantage.

• Are familiar with SolarWinds or equivalent monitoring tools and ServiceNow, and hold or are pursuing CCNP Enterprise/Security or relevant vendor security certifications such as PCNSA/PCNSE or Fortinet NSE; CCIE progress is an advantage.

• Have worked with Pakistani public-sector, banking or large-enterprise customers and understand change control and audit expectations; are methodical with documentation, customer-facing communication, early escalation, cross-team collaboration and nationwide travel/customer change windows, including outside office hours.

Why JazzWorld

JazzWorld is building Pakistan’s next-generation digital services platform.

Here, you will build products and solutions that solve real problems at national scale. The reach of Jazz Telco, combined with shared capabilities across connectivity, transactions and identity, gives builders the power to take an idea from zero to tens of millions.

You will not simply run what already exists. You will create what comes next—turning ambitious ideas into products, products into businesses and businesses into category leaders.

Build. Scale. Learn. Repeat.

As a certified Top Employer, JazzWorld is committed to global workplace standards and an inclusive environment where diverse talent can thrive and perform at their best.

Apply by: 30th October 2026