Network Engineer

Job description:

Summary of Position

Ensure secure, reliable, and performant enterprise and plant (OT) network connectivity across Curium sites and cloud platforms. Operate and improve LAN/WAN/SD‑WAN, wireless, remote access/VPN, firewalls, load balancers, DNS/DHCP/IPAM, and network monitoring, following approved change, incident, and problem processes. Participate in projects to deliver network changes and migrations, and take part in the on‑call rotation to support 24×7 critical services within defined SLAs.

Essential Functions

Essential functions:

• Monitor and operate global network services (LAN, WAN/SD-WAN, Wi‑Fi, remote access/VPN, firewalls, proxies, DNS/DHCP/IPAM) across data centers, sites, and Azure cloud.
• Run day-to-day on Fortinet NGFW/SD-WAN, Cisco switching/wireless, and Azure networking (VNets, VPN/ExpressRoute, Azure Firewall/NVA).
• Own L2 troubleshooting for incidents and performance degradations; drive root-cause analysis and contribute to post-incident reviews.
• Implement approved changes and releases; maintain configuration baselines, backups, and standard builds.
• Provision and maintain network access (VLANs, ACLs, firewall rules, site-to-site VPNs, NAC/802.1X) in line with security standards.
• Operate and tune monitoring/observability (SNMP, Syslog, NetFlow/sFlow, telemetry); publish availability, latency, and capacity KPIs.
• Create and maintain runbooks, diagrams, and inventory (IPAM); keep documentation audit-ready.
• Coordinate with providers/MSPs and carriers for circuits and managed services; track service quality and escalate per OLAs.
• Support DR/BCP network readiness, failover testing, and resilience improvements.
• Contribute to project delivery: requirements, design input, test plans, pilot/rollout/migration support, and cutover readiness.
• Automate repetitive tasks (Python/PowerShell/Ansible) and propose continuous improvements.
• Participate in the on-call rota; respond to major incidents, provide timely comms/handovers, and meet response/restore SLAs.

Requirements

Must have Experience/Skills:

• 3–5+ years in network operations supporting multi-site enterprise environments.
• Hands-on with Cisco routing/switching (BGP, OSPF, VRRP/HSRP, VLANs, STP) and Wi‑Fi.
• Fortinet firewalls and remote access: policies/objects, NAT, VPN (IPsec/SSL), segmentation/micro-segmentation.
• Azure networking: VNets/subnets, route tables, network security groups, Azure Firewall/NVA, VPN/ExpressRoute.
• Network services: DNS, DHCP, NTP; IP addressing and IPAM discipline.
• Monitoring/observability tools (SNMP, Syslog, NetFlow) and packet analysis.
• Operating within ITIL processes for Incident, Problem, and Change; experience in CAB participation.
• Evidence of participation in an on-call rotation and 24×7 support of critical services.
• Strong L2 troubleshooting, structured analysis, and clear communication to technical and non-technical stakeholders.
• Documentation discipline (runbooks, diagrams) and adherence to security/quality standards.
• Collaboration mindset consistent with Curium values (Integrity, Commitment, Collaboration).
• English proficiency (written and spoken); French, Italian, Spanish is a plus.

 

Nice to have Experience/Skills:

• Certifications: Cisco CCNA/CCNP, Fortinet NSE 4–7, Microsoft AZ‑700/Azure Network Engineer Associate.
• Network automation and infrastructure-as-code (Ansible, Terraform), CI/CD for network configurations.
• Zero Trust/SASE, NAC (802.1X), wireless site design; proxy/load-balancer experience.
• Experience in regulated/GxP environments and audit readiness.

 

Education

• Bachelor’s degree in Computer Science, Information Technology, or equivalent experience. Relevant vendor or industry certifications preferred. 

Competencies