QSSU-FLIP-TA- SENIOR NETWORK AND SECURITY ENGINEER

Kampala - Uganda

Monthly Salary: Not Disclosed

Experience Required: 5-10years

Posted on: 07-11-2025

Vacancies: 1 Vacancy

Job Summary

Network Engineering and Operations

Design and Architecture: Design plan and implement scalable high-performance network architectures (LAN WAN Data Center).
Routing and Switching: Configure manage and troubleshoot advanced routing protocols including OSPF BGP EIGRP and IS-IS. Implement and maintain advanced switching features such as VLANs STP trunking EtherChannel and port security.
High Availability: Implement and manage high availability protocols like HSRP VRRP and GLBP to ensure network resilience and uptime.
WAN Management: Oversee and troubleshoot wide-area network (WAN) connectivity including MPLS various VPNs (e.g. IPSec DMVPN SSL) and modern SD-WAN solutions.
Core Concepts: Apply deep understanding of OSI and TCP/IP models IPv4/IPv6 addressing subnetting and supernetting in all design and operational activities.

2. Network Security Management

Firewall Administration: Design implement and maintain next-generation firewalls from vendors such as Cisco ASA/FTD Palo Alto Fortinet Check Point and Juniper SRX.
Threat Prevention: Configure and manage Intrusion Detection/Prevention Systems (IDS/IPS) using platforms like Snort and Suricata or vendor-specific solutions to monitor and block malicious traffic.
Secure Access: Implement and manage secure access solutions including site-to-site and remote access VPNs Zero Trust architectures and Network Access Control (NAC) using 802.1X.
Authentication and Authorization: Configure and maintain AAA services utilizing TACACS and RADIUS for centralized device and user access control.
Segmentation: Develop and enforce network security policies through segmentation and micro segmentation techniques using VLANs VRFs and granular ACLs.
Secure Design: Ensure adherence to secure network design principles including the proper placement and configuration of DMZ and bastion hosts for a secure network edge.

Requirements

Bachelors degree in Computer Science Information Technology or a related field

Minimum of 5-7 years of professional experience in network engineering with a strong focus on network security.

Network Engineering and Operations Design and Architecture: Design plan and implement scalable high-performance network architectures (LAN WAN Data Center). Routing and Switching: Configure manage and troubleshoot advanced routing protocols including OSPF BGP EIGRP and IS-IS. Implement and maintain ...

Network Engineering and Operations

Design and Architecture: Design plan and implement scalable high-performance network architectures (LAN WAN Data Center).
Routing and Switching: Configure manage and troubleshoot advanced routing protocols including OSPF BGP EIGRP and IS-IS. Implement and maintain advanced switching features such as VLANs STP trunking EtherChannel and port security.
High Availability: Implement and manage high availability protocols like HSRP VRRP and GLBP to ensure network resilience and uptime.
WAN Management: Oversee and troubleshoot wide-area network (WAN) connectivity including MPLS various VPNs (e.g. IPSec DMVPN SSL) and modern SD-WAN solutions.
Core Concepts: Apply deep understanding of OSI and TCP/IP models IPv4/IPv6 addressing subnetting and supernetting in all design and operational activities.

2. Network Security Management

Firewall Administration: Design implement and maintain next-generation firewalls from vendors such as Cisco ASA/FTD Palo Alto Fortinet Check Point and Juniper SRX.
Threat Prevention: Configure and manage Intrusion Detection/Prevention Systems (IDS/IPS) using platforms like Snort and Suricata or vendor-specific solutions to monitor and block malicious traffic.
Secure Access: Implement and manage secure access solutions including site-to-site and remote access VPNs Zero Trust architectures and Network Access Control (NAC) using 802.1X.
Authentication and Authorization: Configure and maintain AAA services utilizing TACACS and RADIUS for centralized device and user access control.
Segmentation: Develop and enforce network security policies through segmentation and micro segmentation techniques using VLANs VRFs and granular ACLs.
Secure Design: Ensure adherence to secure network design principles including the proper placement and configuration of DMZ and bastion hosts for a secure network edge.