blueAPACHE is based on the idea that people should have secure and efficient access to their systems wherever they are.
Network Engineer
Location
Sri Lanka
Posted
20 hours ago
Salary
0
Seniority
Senior
Job Description
Network Engineer
blueAPACHE
• Manage incidents, service requests, alerts, and standard changes across customer environments. • Monitor, maintain, and support customer network, wireless, and security infrastructure. • Troubleshoot networking, firewall, wireless, VPN, SD-WAN, and connectivity issues. • Produce and maintain technical documentation, knowledge articles, and operational procedures. • Support Escalation and Senior Engineers during major incidents, maintenance activities, and projects. • Contribute to continuous improvement initiatives, automation opportunities, and knowledge sharing across the engineering team. • Foster a culture of accountability, collaboration, and customer focus. • Support after-hours operational activities, maintenance windows and incident response requirement in accordance with customer service commitments. • Participation in an on-call roster, planned maintenance activities, major incident response and out of hours work is required in accordance with business and customer requirements. • Requires effective collaboration across technical, operations, project, customer-facing to achieve shared business objective. • Responsible for maintaining compliance with organisational policies, customer obligations, security standards, regulatory requirements and industry best practices relevant to their role. • Expected to contribute positively to customer outcomes, service excellence and organisation’s reputation regardless of their primary technical responsibilities.
Job Requirements
- Relevant tertiary qualification in Information Technology, Computer Science, Network Engineering, Cyber Security, or equivalent industry experience.
- 3+ years' experience in a Network Support, Managed Services, or Enterprise Network Engineering environment.
- Experience supporting enterprise networking, wireless, security, and WAN technologies.
- ITIL Foundation certification or experience operating within ITIL-based service management environments.
- Fortinet FCA/FCP, Cisco CCNA, Aruba ACMA, or equivalent certifications highly regarded.
- Demonstrated commitment to continuous learning and professional development.
Benefits
- Competitive salary paid in Australian Dollars (AUD).
- Fully remote work flexibility.
- Regular social events and a fantastic team culture, working alongside experts in their respective fields.
- Ongoing training and professional development opportunities, including company-sponsored certifications.
- High-quality hardware and laptop provided to support your work.
- Employee referral program—refer talented friends and earn rewards when they join the team.
Related Guides
Related Categories
Related Job Pages
More Network Engineer Jobs
Network Engineer – Datacenter
SwisscomTop quality I Ground-breaking innovations I Connected to people and the environment
• Responsible for the design, implementation, and operation of network solutions • Accountable for configurations and supporting troubleshooting • Ensure that connectivity requirements are met • Responsible for the conception and implementation of network designs • Support projects and ensure the quality of network services • Collaborate with various internal stakeholders
Lead, Network Engineer - AI
HumanaLouisville, Kentucky-based Humana is a leading healthcare company that offers a variety of health, wellness, and insurance products and services designed to off
Role Description The Lead, Network Engineer designs, analyzes, plans and modifies network components supporting customer communication implementation activities. The Lead, Network Engineer works on problems of diverse scope and complexity ranging from moderate to substantial. The Lead Network Engineer will be the technical SME for our enterprise WAN, remote LAN/WLAN, and data center SDWAN network services. This role is responsible for engineering, implementing, and operating a multi-vendor SD-WAN environment, scalable campus/branch switching and wireless, and resilient remote branch solutions. You will serve as the escalation point for complex routing, overlay, and authentication issues, including RADIUS/TACACS+. Additionally, you will provide technical leadership to a team of network engineers. You will also work closely with the Lead Network Architect and Principal Network Architect through structured technical solution peer reviews. Responsibilities - Engineering & Design - Lead the end-to-end design of multi-vendor SD-WAN solutions (Cisco SD-WAN/Viptela, Meraki, Fortinet, Aruba, Palo Alto, etc.) across global branch and remote office locations. - Design and maintain secure and scalable data center solutions to terminate SD-WAN overlays, VPNs, and remote-site connectivity. - Develop robust WAN, campus, and data center routing designs using BGP and OSPF, including route redistribution, policy-based routing, and traffic engineering. - Design resilient, standardized remote LAN solutions (access/distribution) including VLANs, spanning-tree strategy, link aggregation, and QoS. - Build and test enterprise wireless solutions for remote and campus locations, including SSID design, authentication/authorization policies, RF design standards, and guest access. - Own the design and lifecycle of RADIUS and TACACS+ solutions for network device access control, 802.1X, and Wi-Fi authentication, including high availability and redundancy. - Collaborate with the Lead Network Architect and Principal Network Architect to ensure solution designs align with enterprise architecture principles, target-state roadmaps, and security standards. - Implementation & Operations - Lead the deployment and configuration of SD-WAN overlays, routing policies, segmentation, and security policies across multiple platforms. - Oversee implementation of switching, routing, and wireless solutions for new sites, data center expansions, and network refresh projects. - Serve as the highest-level escalation point for complex incidents involving SD-WAN overlays, routing instability, LAN/WLAN issues, and AAA (RADIUS/TACACS+) failures. - Define and maintain network configuration standards, templates, and golden configurations for SD-WAN, LAN, WLAN, and routing. - Collaborate closely with security, platform, and applications teams to ensure network designs meet security, performance, and availability requirements. - Governance, Peer Review & Documentation - Participate in structured technical solution peer reviews with the Lead Network Architect and Principal Network Architect, presenting low-level designs (LLDs), implementation approaches, and migration plans for feedback and approval. - Review and provide feedback on designs produced by other engineers to ensure consistency with standard guidelines and operational best practices. - Develop and maintain detailed network diagrams, design documents, and runbooks for SD-WAN, LAN/WLAN, data center, and AAA infrastructure. - Contribute to or lead network automation efforts (e.g., Ansible, Python, APIs) to streamline configuration, compliance checks, and deployments across SD-WAN and LAN. - Define monitoring and observability standards (NetFlow/sFlow, SNMP, syslog, telemetry) for all network domains; work with NOC/operations on alerting and dashboards. - Assist in capacity planning, performance analysis, and continual service improvement for WAN, LAN/WLAN, and data center connectivity. - Leadership & Collaboration - Provide technical leadership and mentorship to network engineers and operations staff; review designs and changes for quality and consistency. - Work in close partnership with the Lead Network Architect and Principal Network Architect to translate high-level architecture into implementable, supportable solutions. - Participate in and sometimes lead cross-functional solution reviews and present to the change advisory board (CAB). - Engage with vendors and service providers for solution evaluation, design improvements, and problem escalation. - Contribute to network strategy and roadmap planning, identifying opportunities for modernization, consolidation, and cost optimization. - Ability to translate business requirements into scalable, supportable network designs. - Strong documentation, communication, and presentation skills; comfortable discussing designs with both technical and non-technical stakeholders. - Leadership mindset with the ability to guide, mentor, and influence other engineers. - High degree of ownership, initiative, and accountability in a fast-moving environment. Qualifications - Bachelor's degree in computer science, Information Technology, Engineering, or equivalent experience. - Ability to pass a background investigation to obtain an ADP II Security Clearance. - 7+ years of hands-on experience in enterprise network engineering, with at least 3 years in a senior or lead role. - Proven experience designing, deploying, and supporting more than one enterprise-scale SD-WAN platform (Cisco SD-WAN/Viptela, Meraki SD-WAN, Fortinet Secure SD-WAN, Aruba EdgeConnect, etc.). - Strong expertise in dynamic routing protocols: BGP: eBGP/iBGP design, route filtering, communities, path manipulation, and troubleshooting. OSPF: multi-area design, route summarization, LSA types, and convergence tuning. - Solid experience with enterprise switching: VLANs, 802.1Q trunking, STP/RSTP/MST, EtherChannel/LACP, and QoS. - Experience with enterprise wireless networking: Centralized controllers or cloud-managed Wi-Fi, RF fundamentals, roaming, guest and secure SSIDs, and 802.1X-based authentication. - Hands-on experience in designing, deploying, and supporting RADIUS and TACACS+ solutions (e.g., Cisco ISE, Forescout, ClearPass, or similar) for device admin and network access control. - Experience working with Infoblox (DDI) and remote site IP addressing design. - Strong troubleshooting skills across SD-WAN overlay/underlay, routing, and AAA-related issues using tools such as packet captures, flow data, and detailed logs. - Experience working in mission-critical, highly available network environments. - Experience working with Data Center Colocation facilities and virtual network fabric provided by vendors such as Equinix and Mega-Port. - 2 or more years of project leadership experience. - Must be passionate about contributing to an organization focused on continuously improving consumer experiences. Preferred Qualifications - Relevant certifications such as: Cisco: CCNP Enterprise, CCIE Enterprise Infrastructure or equivalent level of expertise. Other vendors: NSE (Fortinet), Aruba/HP networking, or equivalent. - Practical experience leveraging AI tools in a network engineering context, such as: Claude, Gemini, GitHub Copilot (or similar tools) for design assistance, documentation generation, troubleshooting guides, and code review of network automation scripts. - Experience with agentic AI and automation patterns, including: Designing and working with AI agents, orchestration frameworks, or MCP-style gateways to interact with network APIs, monitoring platforms, and ticketing systems. Building or maintaining Infrastructure as Code (IaC) for network configurations (Terraform, Ansible, or similar). Integrating network automation and validation into CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps) for configuration testing, compliance checks, and staged rollouts. - Familiarity with zero-trust networking concepts, segmentation, and integration with firewalls and security services (Zscaler ZIA, ZPA). - Experience in hybrid cloud connectivity (AWS/Azure/GCP) and integrating SD-WAN with cloud on-ramps. - Background in strict change control operations and change management processes. Work-At-Home Requirements - Must have the ability to provide a high speed DSL or cable modem for a home office. - At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. - Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information. Travel - While this is a remote position, occasional travel to Humana's offices for training or meetings may be required. Scheduled Weekly Hours - 40 Pay Range - The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc. - $117,600 - $161,700 per year - This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance. Description of Benefits - Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. - Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. - Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.
Senior Network Engineer
S&P Global MobilityIt is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.
Role Description We are seeking a Senior Cloud Network Engineer with hands-on experience designing and operating network infrastructure across Microsoft Azure and Google Cloud Platform. AWS experience is a valued plus, but our primary need is Azure and GCP expertise. - Design, build, and operate cloud network architectures across Azure and GCP in production environments via IaC. - Manage hybrid connectivity (ExpressRoute, Cloud Interconnect, VPN gateways) between on-prem and cloud. - Implement and maintain VNets, VPCs, subnets, peering, load balancers, DNS, and network security controls across both platforms. - Develop Infrastructure-as-Code (Terraform preferred) for repeatable cloud network deployments. - Troubleshoot complex networking issues across multi-region, multi-cloud environments. Qualifications - 5+ years of hands-on cloud networking experience with significant production work in both Azure and GCP. - Deep knowledge of Azure networking (VNets, ExpressRoute, Azure Firewall, Private Link, NSGs, Virtual WAN) and GCP networking (VPCs, Cloud Interconnect, Cloud Armor, Private Service Connect, Shared VPC). - Proven experience with large-scale hybrid cloud architectures connecting on-prem data centers to multiple clouds. - Strong foundation in core networking protocols: BGP, OSPF, DNS, TCP/IP, IPsec. - Experience with Terraform or equivalent IaC tooling for network provisioning. Requirements - AWS networking experience (VPCs, Transit Gateway, Direct Connect, etc.) is a strong plus. - Experience with network automation using Python, Ansible, or similar. - Background in enterprise networking (routing, switching, data center fabrics) transitioning to cloud. Benefits If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us! Company Description It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.
Senior Network Engineer - Access and Edge
S&P Global MobilityIt is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.
Role Description We are seeking an Access and Edge Network Engineer to operate and evolve a large estate of remote access VPN, on-premises firewalls, network access control (ISE), and micro-segmentation (Guardicore) infrastructure across campus and data center environments. This is a hands-on role managing the technologies that control how users, devices, and workloads connect to and traverse the network. - Manage and operate a large-scale remote access VPN environment for a distributed workforce. - Administer on-premises firewalls (Fortinet and Palo Alto) across campus and data center locations, including policy management and rule lifecycle. - Administer Cisco ISE. - Deploy and manage Guardicore micro-segmentation to enforce workload-level security policies in the data center. - Operate Zscaler (ZIA, ZPA) for secure internet access and zero-trust private application connectivity. - Operate Prisma for secure internet access and zero-trust private application connectivity. - Troubleshoot complex connectivity and access issues spanning VPN, firewall, NAC, and micro-segmentation platforms. Qualifications - 5+ years of network engineering experience focused on access control, perimeter security, and edge networking. - Hands-on production experience with at least two of the following (MANDATORY): Zscaler, Fortinet, Cisco ISE, Guardicore. - Demonstrated experience managing remote access VPN at enterprise scale. - Strong experience administering on-premises firewalls in campus and data center environments. - Solid understanding of core networking and security protocols: TCP/IP, IPsec, 802.1X, RADIUS, DNS, DHCP. - Experience working in large enterprise environments with a sizable device and user population. Preferred Qualifications - Experience with all four platforms (Zscaler, Palo Alto, Fortinet, ISE, Guardicore). - Experience with network automation (Python, Ansible, or vendor APIs). - Familiarity with zero-trust network access principles. Benefits If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us! Equal Employment Opportunity It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.


