Wireless Networking MS Engineer (L3)

Sabenza IT & Recruitment; Stellenbosch Local Municipality; On-site; ZAR 520,000 - 900,000; Full time

Job summary

Sabenza IT & Recruitment is seeking a Networking Managed Services Engineer to lead proactive network support for our clients in the Western Cape. You will identify and resolve incidents, maintain SLA commitments, and drive problem management across LAN/WAN and WLAN environments.

You will implement change procedures, document network diagrams, and work with Cisco, Aruba or Meraki devices. Strong Linux familiarity and security governance are essential for this role.

Qualifications

• Experience in network security incident response and threat modeling.
• Ability to prepare system documentation and diagrams.
• Experience deploying enterprise WLAN networks.
• CAB processes in change management and documentation.
• Proficient in Linux environments.

Responsibilities

• Lead test automation and technical support for networks.
• Monitor SLA adherence and resolve incidents.
• Document network diagrams and maintenance procedures.
• Conduct security audits and forensics as required.
• Collaborate on network standards and RFCs.
• Troubleshoot and optimize Cisco/Aruba/Meraki WLAN deployments.

Skills

Networking

WLAN / Wi-Fi

Network Security

Incident management

Cisco/Aruba/Meraki

Firewalls

LAN / WAN

Linux

Education

CCNP Enterprise

CWNA / CWAP / CWDP

CWNE

Fortinet NSE5/NSE6/NSE7

ITIL v4

DevNet Associate

Tools

LogicMonitor

Prometheus

Grafana

NETSCOUT

ServiceNow

Infoblox

Fortinet

Cisco SD-WAN

ISE

Job description

As a Networking Managed Services Engineer, you will lead in providing exceptional managed services to our clients. Your day will revolve around proactively identifying and resolving technical incidents and problems, ensuring our clients meet all service level agreement (SLA) conditions, identify root cause of critical incidents and implement solutions for problems identified

Requirements

Provide test automation and technical support for a network or a virtual private network.Working knowledge of firewalls and other network tools.Provide system documentation and diagrams as well as maintenance documentation.Implement change management procedures that accommodate system architecture changes.Identify and document undocumented areas of a network to develop a network diagram.Ensures that the LAN and WLAN networks of the organization are secure and operational.Uses threat modeling techniques and threat intelligence to develop and maintain a network-based risk assessment tool.Analyzes and detects risks and vulnerabilities associated with new technologies, processes, and applications.Identifies and investigates risk and vulnerability issues and develops and implements solutions to resolve them.Assists in developing and maintaining network standards and procedures.Performs security audit and penetration testing activities to evaluate network security safeguards and identify ways to improve network security posture.Conducts comprehensive investigations and audits, performs all necessary forensics procedures, and responds to client requests for information.Reviews client network policies, policies, network security documents and recommends changes or alterations.Experience with deploying enterprise WLAN network systems.Experience with enterprise network security principles and enterprise principles of design.Excellent customer service skills.Ability to work independently with minimal supervision.Partake and abide by CAB processes when involved in changesA well-working acquaintance in the Linux environmentWorking knowledge of network security administration, port security on switches and IP security on Routers via Access listPreparing monthly work status reports and updating technology-specific documentsResponsible for designing and implementation of customers' WLAN network infrastructureCisco, Aruba or Meraki device management specific technical skillsKnowledge of Layer-2 Switching, Vlan’s, and Access-list.Familiarity of routing protocols: OSPF, EIGRP, IGRP, RIP, and RIPv2.Good understanding of OSI Model, TCP/IP protocol suite (IP, ARP, ICMP, TCP, UDP, SMTP, FTP, TFTP)Excellent understanding of IP addressing, subnetting and routing concepts.Sound knowledge of routing protocols - RIP V1/V2, OSPF, IGRP and EIGRPImplemented SNMP on devices to allow for network managementExcellent knowledge of integration with Wireless and ISE authentication methods not limited to but inclusive af AD and certificate based.Implementation of HSRP, DHCP, DNS, FTP, TFTP, MRTG.Working knowledge of enterprise level network design and implimentationDisplay thorough knowledge of 802.11n and 802.11a.Display working knowledge of Wif-Fi 5, Wi-Fi 6, Wi-Fi 6E and Wi-Fi 7Display working knowledge of wi-fi autherntication methods inclusive of associated encrytions methodsExperience with WLC and ISE monthly reporting procedures and requirementsInstall and troubleshoot Cisco wireless Networks, Wireless Controllers, Access Points, Network Access Control systems, Wireless Network Management toolsEvaluating the performance of Media Access Control (MAC) and higher layers of various types of wireless networksUtilizing monitoring tools to capture and analyze network traffic, maintain uptime, generate usage reports, and spot trendsKnowledge about flex connect, issues and types of flex connectBasic knowledge about port channel configurations on the wired sideExperience performing RF Spectrum Analysis utilizing various tools sets (preferred tooling mentioned below)

Advantageous skills

Knowledge of Enterprise Monitoring (LogicMonitor, Prometheus, Grafana, NETSCOUT)Moderate years of relevant managed services provider and team experienceModerate level knowledge in incident management and ticketing tools preferably Service Now and XurrentUnderstanding of Infloblox and other IPAM solutions - AdvantageousFortinet and CISCO SD-WANEkahau and Hamina wifi analys tool experienceProven knowledge and understanding of DNS and DNS management

Qualifications

Experience with network security and incident response preferred.CCNP Enterprise - EssentialCCIE Enterprise or Wireless - AdvantageousCISCO CWAP - EssentialFortinet NSE5, NSE6 or NSE7 or Implementing Cisco SD-WAN Solutions (ENSDWI) will be an advantageITILv4 - Up to date and relevant ITIL certification (Foundation Level)CCNP Enterprise and AdvantageCisco Firewalls and RoutersCertified Wireless Network Administrator (CWNA) - EssentialCertified Wireless Design Professional (CWDP) - EssentialCertified Wireless Network Expert (CWNE) - AdvantageousCISCO DevNet Associate – Advantageous