Result of Service
The incumbent will be responsible for the following: • Local Area Network and Wide Area Network are secure, resilient, and scalable • Firewall and Threat Prevention policies are deployed on Next Generation Firewall (NGFW) clusters as per the organization cybersecurity policy • Wireless Network is upgraded as per the agreed time, quality and cost • Cisco Application Centric Infrastructure (ACI) solution is implemented as per the agreed time, quality and cost • Network end-users are provided support in an opportune manner • Technical Documentation are accurately prepared and updated on time
Duties and Responsibilities
Background: The United Nations Economic and Social Commission for Western Asia (ESCWA) has an on-prem Data Center, a mid-sized campus Local Area Network (LAN), and Wide Area Network (WAN) connectivity to the global enterprise network. In this context, the Network Engineer, will ensure that ESCWA computer network is designed, configured and maintained as per the industry best practices and the organization’s ICT standards. Duties and Responsibilities: Under the overall guidance of the Chief, ICTS, and the direct supervision by the Head of Cloud, Infrastructure and Cybersecurity Unit, the IT Assistant (Network Engineer) will perform the following tasks: • Design, maintain and provide third level support for Cisco Routers, Cisco Switches, Cisco Application Centric Infrastructure (ACI), Next Generation Firewalls (NGFW), Cisco Wireless Infrastructure, Cisco DNA, and Cisco Identity Service Engine (ISE) • Serve as a technical lead to design, configure, test, implement wide area and local area networks • Perform WLAN and RF site surveys in addition to planning, design, implementation and optimization services for 802.11 WLAN networks • Create and implment firewall and threat prevention policies on Next Generation Firewall (NGFW) clusters as per the organization’s cybesecurity policy • Design, deploy and maintain Cisco ISE infrastructure in order to maintain a secure, stable, and compliant network • Collaborate with service providers and other infrastructure teams providing consistent communication on infrastructure changes, upgrades, etc. • Collaborate with cross-functional teams to identify and prioritize network requirements • Assist with new technology deployments and integration testing • Analyze, troubleshoot, track, and resolve network issues in a timely manner • Ensure the network is scalable, reliable, and secure • Monitor and maintain network security • Stay up-to-date with emerging technologies and industry trends • Evaluate new technologies to determine their applicability with regards to organization needs • Contribute to the development and improvement of network-related processes and tools • Plan and implement network changes during approved after-hours maintenance windows • Keep the performance of the enterprise network optimal and secure, perform upgrades and patching, and monitor relevant network thresholds, capacity, latency, and adjust configurations to optimize traffic flow • Maintain an understanding of the current vulnerabilities, response, and mitigation strategies used in cybersecurity operations and assist with proactive detection and notification • Proactively evaluate network performance, identify bottlenecks, high availability, and find ways of improvement, to ensure long-term efficiency of the network • Work with field installation contractors while they are on-site and provide all technical details to complete installations • Assemble required equipment, cables, adapters, etc. and arrange delivery to site for installation • Create and maintain documentation using Microsoft Visio, Word, and Excel in relation to network configuration, mapping, processes, and service records • Mentor and train junior team members • Manage network asset inventory • Performs other duties as assigned • Commitment to work collaboratively and respectfully toward resolving obstacles and/or conflicts • Demonstrate a commitment to diversity within the office using a personal approach that values all individuals and respects differences in regard to race, ethnicity, age, gender identity and expression, sexual orientation, religion, disability and socio-economic circumstance
Qualifications/special skills
A Bachelor’s degree in Telecommunication, Information Technology, Computer Science or related area is required. All candidates must submit a copy of the required educational degree. Incomplete applications will not be reviewed. A minimum of 10 years of professional work experience in designing, configuring and maintaining large size computers networks comprising of Cisco Routers, Cisco Switches, Cisco Application Centric Infrastructure (ACI), Next Generation Firewalls (NGFW), Cisco Wireless Infrastructure, Cisco DNA, and Cisco Identity Service Engine (ISE) is required. A minimum 5 years of experience in Routing Protocols – OSPF, BGP L2 / L3 is required. A minimum 5 years of experience in Spanning Tree Protocol VSS, HSRP, VRRP, GLBP is required. A minimum 5 years of experience in Cisco WLC Configuration and Tuning, Wi-Fi RF Site Surveys is required. A minimum 3 years of experience in Cisco Identity Service Engine Configuration and Tuning is desirable. A minimum 2 years of experience in Next Generation Firewall (NGFW) Policy Configuration and Troubleshooting is desirable.
Languages
English and French are the working languages of the United Nations Secretariat; and Arabic is a working language of ESCWA. For this position, fluency in English is required. Note: “Fluency” equals a rating of ‘fluent’ in all four areas (speak, read, write, and understand) and “Knowledge of” equals a rating of ‘confident’ in two of the four areas.