Role Summary

As a Network Engineer at Reignova, you will design, implement, and optimize enterprise-grade network infrastructures for high-stakes clients across East Africa. From complex LAN/WAN architectures to SD-WAN rollouts and wireless deployments, you will be the technical authority ensuring connectivity is always fast, secure, and resilient even at scale

Key Responsibilities

• Architect, deploy, and manage enterprise LAN/WAN, SD-WAN, and MPLS network solutions for clients
• Plan and execute Wi-Fi infrastructure deployments across corporate offices, hospitality environments, and large-scale campuses
• Configure and manage enterprise-grade firewalls (Fortinet, Palo Alto, Cisco ASA) and network security policies
• Design and enforce enterprise network security architectures including firewall policies, intrusion detection and prevention systems (IDS/IPS), network access control (NAC), and zero-trust network access (ZTNA) frameworks
• Implement and manage VPN solutions (site-to-site, remote access), SSL/TLS inspection, microsegmentation, and network traffic monitoring to protect enterprise perimeters and internal east-west traffic against evolving threats
• Design and implement hybrid and multi-cloud network architectures connecting on-premises enterprise infrastructure to Azure, AWS, and Google Cloud environments using technologies including ExpressRoute, AWS Direct Connect, Cloud Interconnect, VPN gateways, and virtual WAN solutions
• Manage cloud-native networking components including virtual networks (VNets/VPCs), subnets, network security groups, route tables, load balancers, private endpoints, and DNS resolution across multi-cloud and hybrid environments for enterprise clients
• Implement network monitoring solutions and lead incident response for network outages and performance degradation
• Design, deploy, and manage enterprise VoIP and SIP infrastructure including IP-PBX systems, SIP trunking, session border controllers (SBCs), and unified communications platforms for banking, telecom, and government clients
• Configure and optimize SIP endpoints, dial plans, call routing policies, and QoS mechanisms to guarantee voice quality across multi-site enterprise LAN/WAN environments, while troubleshooting signaling issues using protocol analyzers such as Wireshark and Sngrep
• Enforce VoIP security best practices including SIP authentication, TLS/SRTP encryption, and toll fraud prevention, and integrate voice platforms with enterprise collaboration tools such as Microsoft Teams Direct Routing and Cisco Webex Calling
• Conduct network audits and capacity planning to support clients’ business growth and digital transformation roadmaps
• Design and enforce network segmentation, VLANs, VPNs, and zero-trust network access (ZTNA) architectures
• Collaborate with system administrators, security teams, and client IT departments on integrated infrastructure projects
• Produce detailed network documentation including topology diagrams, IP addressing schemas, and change management records

Required Qualifications & Experience

• Minimum of 3 years of hands-on enterprise networking experience in a consulting or managed services environment
• Deep expertise in Cisco routing and switching (OSPF, BGP, EIGRP, STP, VLANs, QoS)
• Proven experience designing and deploying SD-WAN solutions at enterprise scale
• Strong knowledge of wireless standards (802.11ax/Wi-Fi 6), site surveys, and RF planning
• Solid understanding of network security principles: firewall policies, IDS/IPS, NAC, VPN technologies
• Proven hands-on experience designing and managing enterprise firewall policies, IDS/IPS systems, and NAC solutions using platforms such as Fortinet FortiGate, Palo Alto Networks, or Cisco ASA/Firepower in high-security client environments
• Hands-on experience architecting and managing cloud network infrastructure on at least one major platform — Microsoft Azure (VNet, ExpressRoute, Azure Firewall, Virtual WAN), AWS (VPC, Transit Gateway, Direct Connect), or Google Cloud (VPC, Cloud Interconnect, Cloud Armor)
• Proven ability to design and implement secure hybrid connectivity solutions integrating on-premises data centres with cloud environments, including BGP routing, IPSec tunnels, and private peering configurations
• Solid understanding of cloud networking security controls including network security groups, web application firewalls (WAF), DDoS protection services, and private access architectures that meet the compliance requirements of regulated industries
• Experience with network monitoring tools (PRTG, SolarWinds, Zabbix, or equivalent)
• Minimum of 2 years of hands-on experience configuring and supporting enterprise VoIP and SIP systems including IP-PBX platforms (Cisco CUCM, Asterisk, FreePBX, or 3CX), SIP trunks, dial plans, and session border controllers in multi-site environments
• Strong working knowledge of SIP signaling flows, SDP negotiation, VoIP codecs (G.711, G.729, G.722), and QoS implementation (DSCP marking, priority queuing) to ensure reliable voice delivery across varied network conditions
• Proven ability to diagnose and resolve VoIP call quality and signalling issues using packet capture tools, with a solid understanding of VoIP security threats and the countermeasures required in regulated enterprise environments

Required Education

• Bachelor’s degree in Computer Science, Information Technology, Telecommunications Engineering, Electrical Engineering, or a related field from a recognized institution
• Added Advantage: Master’s degree in Network Engineering, Telecommunications, or Information Systems

Required Certifications (Candidates must hold at minimum one of the certifications listed below)

• Cisco CCNA
• Microsoft Azure Network Engineer Associate (AZ-700)
• CompTIA Security+
• Microsoft Teams Voice Engineer (MS-721)
• CompTIA Network+
• Google Professional Cloud Network Engineer
• AWS Advanced Networking Specialty
• Cisco CCNP
• Fortinet NSE
• Palo Alto PCNSA / PCNSE

Preferred Skills

• SD-WAN (Cisco Viptela / VMware VeloCloud)
• Network Automation (Python / Ansible)
• Cloud Networking (Azure / AWS VPC)
• Zero Trust Architecture
• Wi-Fi 6 Deployments
• Hospitality Network Design
• ITIL Foundation

Candidate Profile

• Young, technically sharp network specialist with a passion for designing infrastructure that never fails
• Strong analytical mindset able to diagnose complex network issues under pressure in live environments
• Confident communicator who can brief executive stakeholders on network health and investment requirements
• Thrives in consulting environments managing multiple active client engagements simultaneously
• Proactive about staying current with emerging networking technologies and vendor certifications

• Architect, deploy, and manage enterprise LAN/WAN, SD-WAN, and MPLS network solutions for clients
• Plan and execute Wi-Fi infrastructure deployments across corporate offices, hospitality environments, and large-scale campuses
• Configure and manage enterprise-grade firewalls (Fortinet, Palo Alto, Cisco ASA) and network security policies
• Design and enforce enterprise network security architectures including firewall policies, intrusion detection and prevention systems (IDS/IPS), network access control (NAC), and zero-trust network access (ZTNA) frameworks
• Implement and manage VPN solutions (site-to-site, remote access), SSL/TLS inspection, microsegmentation, and network traffic monitoring to protect enterprise perimeters and internal east-west traffic against evolving threats
• Design and implement hybrid and multi-cloud network architectures connecting on-premises enterprise infrastructure to Azure, AWS, and Google Cloud environments using technologies including ExpressRoute, AWS Direct Connect, Cloud Interconnect, VPN gateways, and virtual WAN solutions
• Manage cloud-native networking components including virtual networks (VNets/VPCs), subnets, network security groups, route tables, load balancers, private endpoints, and DNS resolution across multi-cloud and hybrid environments for enterprise clients
• Implement network monitoring solutions and lead incident response for network outages and performance degradation
• Design, deploy, and manage enterprise VoIP and SIP infrastructure including IP-PBX systems, SIP trunking, session border controllers (SBCs), and unified communications platforms for banking, telecom, and government clients
• Configure and optimize SIP endpoints, dial plans, call routing policies, and QoS mechanisms to guarantee voice quality across multi-site enterprise LAN/WAN environments, while troubleshooting signaling issues using protocol analyzers such as Wireshark and Sngrep
• Enforce VoIP security best practices including SIP authentication, TLS/SRTP encryption, and toll fraud prevention, and integrate voice platforms with enterprise collaboration tools such as Microsoft Teams Direct Routing and Cisco Webex Calling
• Conduct network audits and capacity planning to support clients’ business growth and digital transformation roadmaps
• Design and enforce network segmentation, VLANs, VPNs, and zero-trust network access (ZTNA) architectures
• Collaborate with system administrators, security teams, and client IT departments on integrated infrastructure projects
• Produce detailed network documentation including topology diagrams, IP addressing schemas, and change management records

• SD-WAN (Cisco Viptela / VMware VeloCloud)
• Network Automation (Python / Ansible)
• Cloud Networking (Azure / AWS VPC)
• Zero Trust Architecture
• Wi-Fi 6 Deployments
• Hospitality Network Design
• ITIL Foundation

• Minimum of 3 years of hands-on enterprise networking experience in a consulting or managed services environment
• Deep expertise in Cisco routing and switching (OSPF, BGP, EIGRP, STP, VLANs, QoS)
• Proven experience designing and deploying SD-WAN solutions at enterprise scale
• Strong knowledge of wireless standards (802.11ax/Wi-Fi 6), site surveys, and RF planning
• Solid understanding of network security principles: firewall policies, IDS/IPS, NAC, VPN technologies
• Proven hands-on experience designing and managing enterprise firewall policies, IDS/IPS systems, and NAC solutions using platforms such as Fortinet FortiGate, Palo Alto Networks, or Cisco ASA/Firepower in high-security client environments
• Hands-on experience architecting and managing cloud network infrastructure on at least one major platform — Microsoft Azure (VNet, ExpressRoute, Azure Firewall, Virtual WAN), AWS (VPC, Transit Gateway, Direct Connect), or Google Cloud (VPC, Cloud Interconnect, Cloud Armor)
• Proven ability to design and implement secure hybrid connectivity solutions integrating on-premises data centres with cloud environments, including BGP routing, IPSec tunnels, and private peering configurations
• Solid understanding of cloud networking security controls including network security groups, web application firewalls (WAF), DDoS protection services, and private access architectures that meet the compliance requirements of regulated industries
• Experience with network monitoring tools (PRTG, SolarWinds, Zabbix, or equivalent)
• Minimum of 2 years of hands-on experience configuring and supporting enterprise VoIP and SIP systems including IP-PBX platforms (Cisco CUCM, Asterisk, FreePBX, or 3CX), SIP trunks, dial plans, and session border controllers in multi-site environments
• Strong working knowledge of SIP signaling flows, SDP negotiation, VoIP codecs (G.711, G.729, G.722), and QoS implementation (DSCP marking, priority queuing) to ensure reliable voice delivery across varied network conditions
• Proven ability to diagnose and resolve VoIP call quality and signalling issues using packet capture tools, with a solid understanding of VoIP security threats and the countermeasures required in regulated enterprise environments