The posting
Responsibilities:
- Designs, administers and supports AWS VPCs, subnets, routing and Transit Gateway connectivity.
- Configures and troubleshoots VPN connectivity and related network-routing issues.
- Reviews and supports Security Groups and NACLs in accordance with approved security and connectivity requirements.
- Administers and troubleshoots AWS Network Firewall, WAF and Palo Alto firewall technologies.
- Supports ALB, NLB and GWLB services and investigates availability, routing and traffic-flow issues.
- Administers and troubleshoots Route 53 services and associated name-resolution issues.
- Supports and troubleshoots Squid services within the supported network environment.
- Performs L3 troubleshooting across network, firewall, load-balancing and name-resolution layers.
- Reviews security policies and firewall rules for correctness, risk and operational impact and implements approved changes.
- Analyses network behaviour and recommends or implements approved optimisation actions.
- Leads root-cause analysis for recurring or high-impact network and firewall incidents.
- Plans and executes complex changes with clear risk analysis, validation and backout plans.
- Provides technical guidance and escalation support to L1 and L2 engineers and coordinates with vendors or other resolver groups.
- Maintains network diagrams, operating procedures, rule documentation and troubleshooting knowledge.
- Performs any other related task as required.
Requirements:
- Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
- 6+ years of overall relevant experience.
- 5+ years of experience in Network & Security, including AWS networking/firewall technologies.
- Hands-on design and support experience with VPC, subnets, routing, TGW, VPN, Security Groups, NACLs, AWS Network Firewall, WAF, ALB/NLB/GWLB, Route 53 and Palo Alto.
- Experience in L3 troubleshooting, security policy/rule review, network optimisation and Squid.
- Certifications relevant to the services provided carry additional weightage on a candidate’s qualification for the role.
Required certification(s): AWS Certified Advanced Networking - Specialty.
Good-to-have certification(s):
- Palo Alto PCNSE.
- CCNP Enterprise or CCNP Security.
- AWS Certified Security - Specialty.
- Relevant Squid experience or certification, where available.
Licence no: 12C6060



