Network & Security Engineer

Tropical Software Solutions is seeking a skilled Network & Security Engineer to design, implement, maintain, and secure the companys network infrastructure. With over five years of experience, the ideal candidate leads a team of 20 professionals to ensure the availability, reliability, and optimal performance of LAN, WAN, Wi-Fi, VPN, and enterprise networks. This role focuses on implementing robust cybersecurity controls, managing firewall and VPN configurations, and proactively protecting organizational systems from emerging security threats. The engineer applies in-depth knowledge of security frameworks and compliance standards such as the NIST Cybersecurity Framework and FISMA Compliance. Their responsibilities include monitoring network activities, performing vulnerability assessments, managing segmentation and access controls, and ensuring disaster recovery preparedness. In addition, this role involves supporting cloud environments and hybrid infrastructures including Microsoft 365 and Azure, as well as managing physical access control systems when required. The Network & Security Engineer plays a critical role in responding to security incidents and ensuring continuous adherence to the companys IT security policies and best practices.
Responsibilities

Design, configure, and maintain comprehensive LAN, WAN, Wi-Fi, VPN, and enterprise network infrastructures tailored to organizational needs.
Plan, install, and manage network hardware including routers, switches, firewalls, and wireless access points to maximize uptime and efficiency.
Monitor network performance regularly to identify and resolve connectivity issues, implement latency improvements, and optimize infrastructure.
Develop and enforce network security policies and access control measures to safeguard confidential data and maintain regulatory compliance.
Set up and manage firewalls, intrusion detection and prevention systems (IDS/IPS), VPNs, and endpoint security tools to defend against cyber threats.
Conduct ongoing monitoring of systems to detect vulnerabilities, unauthorized access, and security threats proactively.
Perform thorough vulnerability assessments, recommend, and implement security improvements that strengthen the organizations security posture.
Manage network segmentation strategies utilizing VLANs, alongside DNS, DHCP, NAT, and dynamic routing protocol configurations to ensure network efficiency and security.
Ensure the integrity of network operations through regular system backups and maintain disaster recovery readiness plans.
Apply security patches, firmware upgrades, and necessary system updates promptly to prevent exposure to cyber risks.
Maintain detailed network documentation, including topology diagrams and security configurations, to support operational transparency and troubleshooting.
Provide technical support and management for Microsoft 365, Azure cloud networking, and hybrid cloud environments to meet evolving business demands.
Configure and maintain CCTV systems, biometric attendance technologies, and access control networks as part of physical security measures.
Lead incident response efforts by analyzing security breaches or anomalies and conducting root cause investigations to mitigate future risks.
Ensure all network and security practices comply with company IT policies as well as industry-standard cybersecurity frameworks and best practices.
Manage and mentor a team of 20 network and security professionals, fostering skill development, coordination, and effective communication to achieve team objectives.

Skills

Network Troubleshooting Network Security Security Information and Event Management Risk Assessment VPN Configuration and Management Risk Management Framework (RMF) IPSec OpenVPN VPN Security Protocols wi-fi VPN Configuration Security Assessment and Authorization (SA&A) Cybersecurity controls NIST Cybersecurity Framework LAN WAN VPN Network Documentation Firewall Configuration VLANs DNS DHCP Windows Server NIST Risk Management Framework (RMF) Security Control Assessment Authorization to Operate (ATO) Process FISMA Compliance TCP/IP Microsoft 365 Azure Cloud Networking intrusion detection systems (IDS) intrusion prevention systems (IPS) Network Segmentation Disaster Recovery Planning Security incident Response

Job Details

Total Positions:

1 Post

Job Type:

Full Time/Permanent

Job Location:

Lahore, Pakistan

Gender:

Male

Minimum Experience:

5 Years

Apply Before:

Aug 21, 2026

Posting Date:

Jul 20, 2026

Tropical Software Solutions

· 11-50 employees - Lahore

Looking for cutting-edge solutions, whether you are a startup, global organization, or an established brand? With 50+ software engineers and IT experts, we can make it possible for you.