Network Design Engineer

Requirements:-

• Design, configuration, and support of Remote Access VPN solutions in enterprise environments
• Strong understanding of VPN protocols (e.g., IPsec, SSL/TLS VPNs)
• Implementation of modern encryption standards and secure cipher configurations (e.g., TLS 1.2/1.3, certificate-based authentication)
• Experience with Windows Server VPN technologies (e.g., RRAS, NPS) and/or enterprise VPN platforms (e.g., Cisco, Palo Alto)
• Network security configuration, including firewall rules, NAT, and segmentation
• Endpoint configuration and deployment using tools such as Group Policy, Intune, or equivalent
• System hardening and security patching in line with recognised benchmarks
• Experience delivering VPN upgrades or migrations from legacy environments to modern secure configurations
• Troubleshooting of VPN connectivity, authentication, and performance issues
• Exposure to cloud-based VPN or hybrid connectivity solutions (e.g., Azure VPN Gateway)

Additional requirements:-

• Ability to execute controlled pilot deployments and phased rollouts across user groups
• Strong documentation capabilities, including configuration guides and operational handover materials
• Experience working in security-focused initiatives or infrastructure uplift programs
• Understanding of security best practices and frameworks relevant to network and remote access security
• Familiarity with Zero Trust network access concepts
• Experience with SIEM or monitoring tools for VPN and network activity