Infrastructure Engineer (Network and Security) (KZN: Durban/Umhlanga)

Objectives of the Role

• Maintain the reliability and security of Borwood’s global IT infrastructure, including voice, network, security and hosting elements.
• Assure ongoing IT infrastructure performance by building appropriate technical designs and configurations and providing escalation support for the infrastructure.
• Provide technical advice, recommendations and support to assist Borwood teams in building proposals and designs for customer projects.

Key Responsibilities:

Support for the network and IT infrastructure

• Using appropriate tools and resources to troubleshoot IT infrastructure problems and outages.
• Work with customers and Borwood staff for problem resolution.
• Engage with vendors as necessary to resolve network faults and performance issues.
• Participate in support schedules and rotas.
• Follow Borwood policies and procedures for the resolution and management of incidents, service requests

and other operational tasks.

Customer Engagement

• Work closely with the technical and account management teams to build a broad framework for successful

engineering engagements with Borwood customers.

• Work closely with customer engineering and project teams to provide consulting, operational and

engineering support for customer proposals and projects, as required.

• Recommend, document, plan and implement engineering changes for Borwood customers, as required.
• Develop a thorough technical understanding of our customer’s infrastructure and be able to provide

recommendations and advice to the relevant account management teams.

• Provide customer-facing technical documentation as required.
• Proactively identify any current or potential issues with the customer designs and deployments.

Security

• Manage and optimise firewall security policies, NAT rules, objects, zones, applications, services and access

controls.

• Configure and troubleshoot IPsec and SSL VPNs, including site-to-site and remote-access VPN solutions.
• Manage firewall high-availability configurations, failover, routing protocols, VLANs and network segmentation.
• Monitor firewall performance, traffic flows, capacity and security events, and perform upgrades, backups,

patches and maintenance.

• Configure and manage FortiGate security services, including IPS/IDS, antivirus, web filtering, application

control, SSL inspection, DNS filtering and traffic shaping.

• Use firewall logging, monitoring and diagnostic tools to investigate traffic, suspicious activity and security

events

• Work with network, infrastructure, cloud and cybersecurity teams on projects, customer deployments and

infrastructure changes.

• Work within established configuration and change management policies to ensure success of network

changes.

• Recommend, document and plan core infrastructure maintenance and system upgrades, as required.
• Recommend, document and plan core infrastructure design changes, as required.
• Recommend, document and plan customer deployment designs, as required.
• Proactively recommend IT infrastructure changes to meet business requirements.
• Proactively provide constructive critical analysis and recommendations for network and infrastructure

development.

• Actively participate in network planning meetings relating to capacity, design and development of network,

and provide recommendations and proposals.

• As required, work with customers or the business to gather complex network and security requirements to

be used in the creation of resilient, secure infrastructure designs.

Ensure security of the technical infrastructure

• Use appropriate configurations, tools and follow relevant procedures to assure the security of the technical

infrastructure.

• Proactively analyse vulnerabilities in the IT infrastructure and recommend, document and plan strategies for

mitigation.

• Recommend, document and plan changes or new deployments of security infrastructure, as required.

On-going Reporting and Monitoring

• Assist in the monitoring of key performance metrics and indicators for IT infrastructure to ensure service

availability.

• Assist in the monitoring of IT infrastructure resource utilisation, trending, and capacity planning, as required

by the business.

• Provide reporting on production services as required by the business.
• As required, create and update documentation for all relevant procedures, solutions and architectures.

Knowledge Management

• Provide subject-matter expertise to assist in business development and opportunities.
• As required, document procedures, product specifications and technology deployments that will provide

guidance to other support and engineering staff.

• As required, provide training sessions to other support and engineering staff to develop capability and ensure

transfer of knowledge.

Other

• Support and participate in other areas of the business as and when required.
• Assist with the implementation and/or handover of services to customers, which may include travel for site

visits, etc.

• Adhere to Borwood’s policies and procedures.
• Work both individually and as part of a team where appropriate.
• Fulfil any training and/or examination requirements as per the Company’s skills and certification matrix.
• Be willing to carry out or assist with such tasks as may be required in order to achieve deliverables, or as

reasonably requested by a member of Borwood.

• Regularly familiarise yourself with Borwood’s portfolio of Products and Services, Customers, Suppliers and

internal Procedures.

• Be a professional and courteous representative for Borwood at all times.

Necessary Experience and/or Qualification

• 4+ years of enterprise Fortigate firewall and network-security experience.
• Experience with Palo Alto firewall configurations and deployments an advantage.
• Experience with Cisco Meraki SD-WAN and LAN deployments an advantage.
• Relevant network certifications an advantage.
• Relevant Security certifications (NSE 5/6 or equivalent) an advantage
• Experience with Palo Alto firewall configurations and deployments an advantage.
• Strong hands-on experience with both FortiGate firewalls, FortiOS and other Fortinet products
• Strong understanding of firewall policies, NAT, VPNs, UTM/security profiles, Application-ID, User-ID, URL

filtering, Threat Prevention

• Strong understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, NAT, VLANs, subnetting, network segmentation,

Layer 2 and Layer 3 networking.

• Hands-on experience with BGP, OSPF, static routing, data-centre, WAN, LAN and cloud connectivity.

Page 3 of 3

• Experience with site-to-site IPsec VPN, remote-access VPN and FortiGate SSL/IPsec VPN technologies.
• Experience with firewall logging, monitoring, SIEM platforms, security-event analysis and suspicious traffic

investigation.

• Capability to independently troubleshoot firewall policy and rulebase issues, NAT and routing problems, IPsec

VPN connectivity, SSL VPN issues, asymmetric routing, DNS and application connectivity, packet drops, session

problems, HA/failover issues and performance or latency issues.

• Experience using Wireshark, tcpdump, packet captures, firewall session tables, logs and CLI diagnostic

commands.

• Experience with ISO 27001 and PCI an advantage.
• Experience working with Linux / Unix an advantage.

Personal Skills/Competencies Required

• Strong oral and written communication skills, being able to articulate technical issues clearly.
• Highly technical, with strong analytical and problem solving skills.
• Adaptability to a fast-paced dynamic global environment with an entrepreneurial atmosphere.
• Multi-tasking across multiple customer and supplier technology, knowledge and operating domains.
• Contribution to continuous improvement and innovation.
• Adopting a thorough and organised approach to work.
• Self-motivated.
• Abl