Infrastructure Engineer (Network and Security) (KZN: Durban/Umhlanga)

Objectives of the Role

• Maintain the reliability and security of Borwood’s global IT infrastructure, including voice, network, security and hosting elements.
• Assure ongoing IT infrastructure performance by building appropriate technical designs and configurations and providing escalation support for the infrastructure.
• Provide technical advice, recommendations and support to assist Borwood teams in building proposals and designs for customer projects.

Key Responsibilities:

Support for the network and IT infrastructure

• Using appropriate tools and resources to troubleshoot IT infrastructure problems and outages.
• Work with customers and Borwood staff for problem resolution.
• Engage with vendors as necessary to resolve network faults and performance issues.
• Participate in support schedules and rotas.
• Follow Borwood policies and procedures for the resolution and management of incidents, service requests
  and other operational tasks.

Customer Engagement

• Work closely with the technical and account management teams to build a broad framework for successful
  engineering engagements with Borwood customers.
• Work closely with customer engineering and project teams to provide consulting, operational and
  engineering support for customer proposals and projects, as required.
• Recommend, document, plan and implement engineering changes for Borwood customers, as required.
• Develop a thorough technical understanding of our customer’s infrastructure and be able to provide
  recommendations and advice to the relevant account management teams.
• Provide customer-facing technical documentation as required.
• Proactively identify any current or potential issues with the customer designs and deployments.

Security

• Manage and optimise firewall security policies, NAT rules, objects, zones, applications, services and access
  controls.
• Configure and troubleshoot IPsec and SSL VPNs, including site-to-site and remote-access VPN solutions.
• Manage firewall high-availability configurations, failover, routing protocols, VLANs and network segmentation.
• Monitor firewall performance, traffic flows, capacity and security events, and perform upgrades, backups,
  patches and maintenance.
• Configure and manage FortiGate security services, including IPS/IDS, antivirus, web filtering, application
  control, SSL inspection, DNS filtering and traffic shaping.
• Use firewall logging, monitoring and diagnostic tools to investigate traffic, suspicious activity and security
  events
• Work with network, infrastructure, cloud and cybersecurity teams on projects, customer deployments and
  infrastructure changes.
• Work within established configuration and change management policies to ensure success of network
  changes.
• Recommend, document and plan core infrastructure maintenance and system upgrades, as required.
• Recommend, document and plan core infrastructure design changes, as required.
• Recommend, document and plan customer deployment designs, as required.
• Proactively recommend IT infrastructure changes to meet business requirements.
• Proactively provide constructive critical analysis and recommendations for network and infrastructure
  development.
• Actively participate in network planning meetings relating to capacity, design and development of network,
  and provide recommendations and proposals.
• As required, work with customers or the business to gather complex network and security requirements to
  be used in the creation of resilient, secure infrastructure designs.

Ensure security of the technical infrastructure

• Use appropriate configurations, tools and follow relevant procedures to assure the security of the technical
  infrastructure.
• Proactively analyse vulnerabilities in the IT infrastructure and recommend, document and plan strategies for
  mitigation.
• Recommend, document and plan changes or new deployments of security infrastructure, as required.

On-going Reporting and Monitoring

• Assist in the monitoring of key performance metrics and indicators for IT infrastructure to ensure service
  availability.
• Assist in the monitoring of IT infrastructure resource utilisation, trending, and capacity planning, as required
  by the business.
• Provide reporting on production services as required by the business.
• As required, create and update documentation for all relevant procedures, solutions and architectures.

Knowledge Management

• Provide subject-matter expertise to assist in business development and opportunities.
• As required, document procedures, product specifications and technology deployments that will provide
  guidance to other support and engineering staff.
• As required, provide training sessions to other support and engineering staff to develop capability and ensure
  transfer of knowledge.

Other

• Support and participate in other areas of the business as and when required.
• Assist with the implementation and/or handover of services to customers, which may include travel for site
  visits, etc.
• Adhere to Borwood’s policies and procedures.
• Work both individually and as part of a team where appropriate.
• Fulfil any training and/or examination requirements as per the Company’s skills and certification matrix.
• Be willing to carry out or assist with such tasks as may be required in order to achieve deliverables, or as
  reasonably requested by a member of Borwood.
• Regularly familiarise yourself with Borwood’s portfolio of Products and Services, Customers, Suppliers and
  internal Procedures.
• Be a professional and courteous representative for Borwood at all times.

Necessary Experience and/or Qualification

• 4+ years of enterprise Fortigate firewall and network-security experience.
• Experience with Palo Alto firewall configurations and deployments an advantage.
• Experience with Cisco Meraki SD-WAN and LAN deployments an advantage.
• Relevant network certifications an advantage.
• Relevant Security certifications (NSE 5/6 or equivalent) an advantage
• Experience with Palo Alto firewall configurations and deployments an advantage.
• Strong hands-on experience with both FortiGate firewalls, FortiOS and other Fortinet products
• Strong understanding of firewall policies, NAT, VPNs, UTM/security profiles, Application-ID, User-ID, URL
  filtering, Threat Prevention
• Strong understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, NAT, VLANs, subnetting, network segmentation,
  Layer 2 and Layer 3 networking.
• Hands-on experience with BGP, OSPF, static routing, data-centre, WAN, LAN and cloud connectivity.
  Page 3 of 3
• Experience with site-to-site IPsec VPN, remote-access VPN and FortiGate SSL/IPsec VPN technologies.
• Experience with firewall logging, monitoring, SIEM platforms, security-event analysis and suspicious traffic
  investigation.
• Capability to independently troubleshoot firewall policy and rulebase issues, NAT and routing problems, IPsec
  VPN connectivity, SSL VPN issues, asymmetric routing, DNS and application connectivity, packet drops, session
  problems, HA/failover issues and performance or latency issues.
• Experience using Wireshark, tcpdump, packet captures, firewall session tables, logs and CLI diagnostic
  commands.
• Experience with ISO 27001 and PCI an advantage.
• Experience working with Linux / Unix an advantage.

Personal Skills/Competencies Required

• Strong oral and written communication skills, being able to articulate technical issues clearly.
• Highly technical, with strong analytical and problem solving skills.
• Adaptability to a fast-paced dynamic global environment with an entrepreneurial atmosphere.
• Multi-tasking across multiple customer and supplier technology, knowledge and operating domains.
• Contribution to continuous improvement and innovation.
• Adopting a thorough and organised approach to work.
• Self-motivated.
• Able to present, document and explain complex network configurations.

Notice: The above statements are intended to describe the general nature and level of work being performed by
the individual assigned to this position. They are not to be construed as an exhaustive list of all responsibility,
duties, and skills required and staff may be required to perform duties outside of their normal responsibility from
time to time, as needed