​

Network Architecture, Standards & Transformation

• Assess and document current-state network topology and produce target-state designs (HLD/LLD) covering LAN/WAN, routing, VLANs, wireless, and firewall zoning.
• Define and enforce network configuration standards.
• Direct system installations and cutovers.

IT/OT Segmentation & Access Control

• Design and maintain security zones and segmentation controls to protect OT/GxP equipment and associated data.
• Maintain a connectivity matrix for regulated systems (sources/destinations/ports/justifications), and ensure changes follow change control and are evidence-ready for audit.
• Implement secure management-plane access.

Firewall Engineering & Perimeter Services

• Own Firewall lifecycle management: policy architecture (zone-based), object governance, NAT, VPNs (site-to-site and remote access), HA/health checks, backups, and firmware lifecycle.
• Implement security controls appropriate to the environment.
• Conduct quarterly firewall rule reviews (remove unused rules, reduce risk, ensure logging and justifications).

Monitoring, Performance & Troubleshooting (Tier-3)

• Implement and tune network monitoring (e.g., PRTG/OpManager).
• Perform evidence-based root cause analysis on outages and performance issues and implement preventative fixes.
• Plan and deliver upgrades and optimizations (firmware, topology improvements, QoS for voice/critical traffic) with change control and post-change validation.

Enterprise Systems Connectivity (M365, SAP, LIMS, TrackWise)

• Ensure network readiness for core systems: DNS/routing correctness, firewall allowlists, proxy paths, VPN/remote access, and capacity planning.
• Collaborate with Systems Engineer and application owners during upgrades and incidents to isolate network vs system/application causes and restore service quickly.

DR, Audit & Documentation

• Implement and test network components of the Disaster Recovery Plan: firewall restore procedures, VPN failover, alternate connectivity, DNS/routing failover, and documented runbooks.
• Participate in network-related audits and lead remediation; provide evidence (configs, logs, access controls, firmware/patch posture) and track closure.
• Maintain up-to-date network diagrams, as-built documentation, SOPs/runbooks, and lifecycle registers (firmware, ISP circuits, VPN inventory).

Key Performance Indicators (KPIs)

• Network availability/uptime for critical services and sites.
• Mean time to resolve (MTTR) for network incidents and reduction of repeat incidents.
• Firewall policy hygiene: quarterly rule review completion, removal of unused/risky rules, and audit evidence quality.
• IT/OT segmentation compliance: approved connectivity matrix coverage and change control adherence.
• Monitoring coverage and alert quality (noise reduction, critical detection).