Network Engineer

Overview We are Lenovo. We do what we say. We own what we do. We WOW our customers. Lenovo is a global technology company with a broad portfolio of AI-enabled devices, infrastructure, software, solutions, and services. For more information, visit Job Summary: We are seeking a highly skilled and motivated Network Engineer to join our ICT Infrastructure team. The role covers day-1 operations and project implementation of client network infrastructure, including Palo Alto, Check Point and Fortigate firewalls, Cisco switches, Alcatel switches, Aruba Clear Pass Policy Manager (CPPM), Cisco/Juniper routers, Cisco/Aruba wireless solutions, network load balancers (F5), and other related devices. You will ensure the new network infrastructure setup and enhancements to existing networks, with focus on availability, performance, and security of our network services. Responsibilities Network Design: Plan LAN/WLAN solutions aligned to business requirements, perform RF site surveys, analyze coverage, document topologies, capacity plans, and migration strategies for technology refresh. Implement and tune Wi-Fi networks (802.11 standards), optimize AP placement and coverage for reliability. Network Analysis and Implementation: Define network scope, provide solutions for project execution, and act as a senior resource to plan configuration changes during migrations. Troubleshoot and resolve network issues to minimize downtime during critical outages. Network and Security Deployment: Design, build, configure, test, and document LAN/WLAN and security deployments; provide ongoing maintenance support for the deployment scope of work. Firewall Management: Deploy, configure, manage, and maintain Palo Alto and Check Point firewalls, onboarding to central management consoles, and maintain security policies. IPSEC, Routing and Policies: Configure IPSEC, IKE, crypto maps; analyze and maintain firewall policies to control traffic and protect against threats. Switch and Router Management: Configure and manage Cisco switches and routers; plan tech-refresh configurations and resolve LAN/WAN connectivity issues in the critical environment. Access Control and Authentication: Administer Aruba CPPM for user authentication and access control; manage RADIUS and certificate configurations to ensure policy compliance. Wireless Management: Deploy and configure WLC with SSO, Flex Connect, and IAP/EWC concepts; manage APs and RFID; troubleshoot WLAN connectivity issues. Load Balancer Management: Deploy F5 LTM, configure SSL proxy, VIPs, and iRules as required. Documentation: Create accurate network diagrams, configurations, asset inventory, and SOPs. Collaboration: Work with system administrators and security experts to achieve shared network goals. Security Compliance: Ensure network configurations comply with industry best practices and security standards. Automation: Automation skills in network and security deployment are an added advantage. Qualifications Minimum 4 years of relevant experience. Bachelor’s degree in Information Technology, Computer Science, or related field. CCNA is a must. CCNP and PCNSE or equivalent certification are preferred. Proven experience managing Palo Alto, Check Point, and Fortigate firewalls. Proficiency configuring and troubleshooting Cisco or equivalent switches and routers. Hands-on experience with Aruba CPPM or similar systems. Proficient in OSPF and BGP configuration. Strong knowledge of network protocols, routing, switching, and Wi-Fi standards (802.11 a/b/g/n/ac/ax). Excellent problem-solving, analytical, and communication skills; effective teamwork. Preferred Skills Hands-on experience with Ekahau and AirMagnet is advantageous. Industry certifications such as PCNSA or CCSA are a plus. Familiarity with network monitoring/management tools. Experience in network automation and ACI infrastructure deployment. Experience in hybrid network transitions from on-premise to cloud. We are an Equal Opportunity Employer and do not discriminate against any employee or applicant because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class. #J-18808-Ljbffr