Network and Security Engineer
- Full-Time
- On-Site
Job Description:
Role Purpose
Design, implement, and maintain all network and security infrastructure across HQ, warehouse,
and retail branches, ensuring stable connectivity, secure nationwide and international VPN
networks, and reliable Fortinet/MikroTik operations.
Key Responsibilities
Network Infrastructure
Design and implement LAN/WAN architectures for HQ, warehouse, and stores.
Configure routing, switching, VLANs, DHCP, DNS, and intersite connectivity.
Manage the nationwide VPN network connecting all HATZ Retail locations.
Maintain international VPN connections with brand headquarters overseas.
Implement structured cabling and maintain racks, patch panels, and labeling.
Plan and optimize WiFi coverage and AP placement in retail environments.
Ensure stable connectivity for POS, ERP, CCTV, and peoplecounting systems.
Fortinet Systems
Configure and maintain FortiGate, FortiSwitch, and FortiAP devices.
Manage firewall policies, NAT, IPS/IDS, web filtering, and application control.
Handle IPsec/SSL VPN, intersite security policies, firmware upgrades, and backups.
CCTV & LowCurrent Systems
Support and maintain IPbased CCTV systems, NVR connectivity, and secure remote
access.
Ensure proper PoE budgeting and switch configurations for cameras and APs.
Integrate and maintain lowcurrent systems (CCTV, peoplecounting sensors, and all
related low-current systems).
Security Operations
Monitor logs, alerts, and security events.
Enforce access control and endpoint/network security policies.
Secure connectivity for store systems and lowcurrent devices.
Documentation
Maintain network diagrams, IP schemas, rack layouts, and deployment checklists.
Required Qualifications
3–5 years experience in enterprise or retail networking.
Strong handson experience with Fortinet (FG, FS, FAP).
Very good experience with MikroTik routers, routing, firewall, and VPN.
Solid understanding of TCP/IP, VLANs, routing, switching, DHCP, DNS.
Experience with structured cabling and CCTV/IP camera networking.
Ability to read AutoCAD layouts and plan cabling/AP placement.
Preferred
Fortinet NSE4+
MikroTik MTCNA/MTCRE
Retail networking experience