IT Network & Security Lead

Position:  IT Network & Security Lead
Department:  Information Technology
Reporting To:  IT Infrastructure & Cyber Security Manager / Head – IT
Location:  Corporate Office / Plant Sites (Travel as required)

Position Summary 

The IT Network & Security Lead will be responsible for supporting, maintaining, monitoring, and securing the organisations IT network infrastructure across corporate offices, manufacturing plants, and project sites. 

The role focuses on ensuring high availability, network performance, cybersecurity compliance, and day-to-day operational support while assisting in IT transformation initiatives.

Key Responsibilities 

Network Infrastructure

• Manage LAN, WAN, Wi-Fi, VPN, MPLS, SD-WAN, and Internet connectivity.
• Configure and support routers, switches, wireless controllers, and access points.
• Monitor network health, bandwidth utilization, and availability.
• Troubleshoot network outages and connectivity issues.
• Maintain structured cabling and network documentation.
• Coordinate with ISPs and telecom vendors for circuit management.

Network Security

• Administer firewalls (Sophos, Fortinet, Palo Alto, SonicWall, Cisco ASA, etc.).
• Configure VPNs for remote users and branch offices.
• Monitor firewall logs and investigate security alerts.
• Support IDS/IPS, web filtering, and email security solutions.
• Implement network segmentation for corporate and plant environments.
• Assist in vulnerability assessments and remediation activities.

Identity & Access Management

• Support Microsoft Active Directory and Group Policies.
• Manage user access, security groups, and authentication.
• Assist in Microsoft Entra ID (Azure AD), ADFS, and MFA implementation.
• Support privileged access management initiatives.

Endpoint & Infrastructure Security

• Support endpoint protection and antivirus solutions.
• Assist with patch management for servers and network devices.
• Monitor endpoint security dashboards.
• Coordinate remediation of security incidents.

Monitoring & Operations

• Monitor network and security tools.
• Maintain daily operational checklists.
• Perform root cause analysis for recurring issues.
• Maintain network inventory and asset documentation.

Disaster Recovery & Business Continuity

• Support backup network links and failover testing.
• Participate in disaster recovery drills.
• Ensure backup configurations of network devices.

Compliance & Governance

• Ensure compliance with IT security policies.
• Support ISO 27001, cybersecurity audits, and internal audits.
• Maintain network diagrams, SOPs, and configuration documentation.
• Assist in risk assessments and compliance reporting.

Vendor Management

• Coordinate with OEMs, ISPs, and system integrators.
• Track AMC, warranty, and license renewals.
• Monitor vendor SLA compliance.

Project Support

• Participate in IT infrastructure rollout projects.
• Support office, plant, and project-site network deployments.
• Assist in firewall upgrades, Wi-Fi modernization, and cloud connectivity projects.
• Support SAP cloud connectivity and hybrid infrastructure initiatives.

Networking

• TCP/IP, DNS, DHCP
• VLAN, STP
• OSPF, BGP (basic understanding)
• MPLS
• SD-WAN
• VPN (IPSec, SSL)
• NAT
• QoS
• Network monitoring tools (PRTG, SolarWinds, ManageEngine, Zabbix)

Security

• Firewall administration
• IDS/IPS
• Web filtering
• NAC
• Endpoint security
• MFA
• SIEM (basic knowledge)
• Vulnerability management

Microsoft Technologies

• Windows Server
• Active Directory
• Group Policy
• DNS
• DHCP
• Microsoft Entra ID (Azure AD)
• ADFS

Cloud

• AWS Networking (basic)
• Azure Networking (basic)
• VPN Gateway
• ExpressRoute / Direct Connect (preferred)

Tools

• Wireshark
• Putty
• SSH
• Cisco IOS
• Sophos Central
• FortiManager (preferred)
• Microsoft Defender
• ITSM tools (ServiceNow, ManageEngine, Freshservice)

Qualification 

• Bachelor's Degree in Computer Science, Information Technology, Electronics, or related field.
•  6-8 years of experience in Network Administration and IT Security.
• Experience in manufacturing, EPC, infrastructure, or industrial organizations is preferred.

Preferred certifications

• CCNA
• CCNP (preferred)
• Fortinet NSE
• Sophos Certified Engineer
• Microsoft Certified: Azure Administrator Associate
• CompTIA Security+
• ITIL Foundation

Key competencies 

• Strong analytical and troubleshooting skills
• Understanding of cybersecurity principles
• Incident response and problem-solving
• Vendor coordination
• Documentation and reporting
• Customer-focused approach
• Good communication and teamwork
• Ability to work under pressure

Key performance indicators 

• Network uptime (≥99.9%)
• Firewall and VPN availability
• Mean Time to Resolve (MTTR) network incidents
• Security incident response time
• Patch compliance for network devices
• Wi-Fi coverage and performance
• ISP SLA adherence
• Successful completion of infrastructure projects
• Audit and compliance findings closure
• Network documentation accuracy

Preferred Experience 

Experience supporting a multi-location EPC, manufacturing, or infrastructure organisation with corporate offices, plants, warehouses, and project sites. 

Exposure to SAP S/4HANA Cloud connectivity, Microsoft 365, hybrid cloud networking, OT/IT network segmentation, and industrial network security will be an added advantage.