About the job

Job SummaryThe Network Engineer is responsible for planning, designing, implementing, and maintaining the organization’s network infrastructure. This role ensures optimized connectivity and segmentation across enterprise and regulated environments, supporting business, cybersecurity, and compliance objectives.

Key responsibilities include network architecture planning, segmentation for sensitive environments such as the Card Data Environment (CDE), subnet design, and management of switching, routing, VLANs, and firewalls. The Network Engineer collaborates closely with Cybersecurity, Platform Architecture, and Project teams to support connectivity, network readiness, and implementation of best practice frameworks. While not part of Security Operations or Audit & Risk functions, this role provides technical support during network-related incidents, assists in troubleshooting and recovery, and supplies information for audits when required.

Key Responsibilities

• 1) Network Architecture & PlanningDesign and implement enterprise network infrastructure encompassing LAN, WAN, VPN, wireless, and data center connectivity.
• Plan and execute segmentation for critical systems, including Card Data Environment (CDE), database and application networks, corporate and guest access networks.
• Ensure network segmentation aligns with security requirements and regulatory frameworks (PCI-DSS, SOC 2, RMiT).
• Perform network subnet design and planning, maintaining proper IP address allocation and documentation.
• Possess authority to allocate and manage project subnets, including preparing network addressing schemes for new implementations.
• Maintain and regularly update comprehensive network architecture diagrams, reflecting physical and logical topologies across the organization.

• 2) Network Operations & ManagementManage and administer switching, routing, and VLAN configurations, including wireless subnet assignments and access segmentation.
• Maintain network device configurations following baseline standards and approved change management processes.
• Collaborate in managing firewalls, primarily supporting policy reviews, configuration updates, and network routing integration.
• Conduct network performance monitoring, bandwidth optimization, and error resolution to ensure high availability.
• Support operational readiness for initiatives such as SASE, Zero Trust Network Access (ZTNA), and Network Data Loss Prevention (DLP) deployments.
• Ensure all network changes are documented, reviewed, and aligned with infrastructure and cybersecurity standards.

• 3) Incident Response & TroubleshootingServe as the first escalation point for diagnosing and resolving network-related issues.
• Participate in incident response activities concerning connectivity failures, latency, or security-related network disruptions.
• Perform root cause analysis for network incidents and document corrective measures to prevent recurrence.
• Support service restoration and contribute to post-incident reviews from a network engineering perspective.

• 4) Collaboration & Governance SupportCollaborate with the Cybersecurity Lead, Infrastructure, and Project teams on architecture validation, security-aligned network design, and secure system integration, while supporting the SOC on shared firewall operations and network log requests when required.
• Provide information related to network architecture, subnets, and configurations to audit or compliance teams upon request.
• Minimal engagement in risk management or compliance tracking beyond necessary information provision.