Key Responsibilities

1. Network Management

Configure, manage, and troubleshoot routers, firewalls (Fortinet, Checkpoint), and L2/L3 switches (Cisco/HP)
Manage VLANs, STP, LACP, OSPF/BGP, NAT, and routing policies
Maintain secure campus LAN/WAN with segmentation and zero-trust principles
Manage site-to-site and remote access VPNs
Ensure redundancy, HA, and failover; handle L2/L3 incident resolution

2. Monitoring, Logging & Alerting

Configure and maintain Zabbix monitoring and Grafana dashboards for network and infrastructure health
Tune alerts to reduce noise and define escalation policies
Analyse network performance and support capacity planning
Review logs from firewalls, switches, servers, and endpoints to identify anomalies

3. SIEM & Security Operations

Onboard log sources into the SIEM (Wazuh, Splunk, QRadar, Elastic, Sentinel, or similar)
Build and tune correlation rules and use cases; triage and escalate security incidents
Coordinate vulnerability assessments and track remediation
Run periodic firewall rule audits and policy optimisation

4. Patch Management & Hardening

Own the patch lifecycle for Windows and Linux servers and endpoints: test groups, rollout, rollback, and compliance reporting
Use patch tooling (WSUS/SCCM/Intune, Ansible, Red Hat Satellite, or equivalent)
Apply server and endpoint hardening baselines

5. Server & Endpoint Administration

Administer Windows Server and Linux environments, including Active Directory (GPO, DNS, DHCP, OU, RBAC) and file servers
Manage endpoint onboarding, security compliance, and asset lifecycle
Support email security and user access governance

6. Compliance, Backup & DR