Senior Infrastructure Engineer I

Lahore1w ago

Seniority: Senior

About the role

<div class="content-intro">We don’t think about job roles in a traditional way. We are anti-silo. Anti-career stagnation. Anti-conventional.  Beyond ONE is a digital services provider radically reshaping the personalised digital ecosystems of consumers in high growth markets around the world. We’re building a digital services aggregator platform, with a strong telco foundation, and a profitable growth strategy that empowers users to drive their own experience—subscribe once, source from many, and only pay for what you actually use.  Since being founded in 2021, we’ve acquired Virgin Mobile MEA, Friendi Mobile MEA and Virgin Mobile LATAM (with 6.5 million subscribers) and 1600 dedicated  colleagues across Chile, Colombia, KSA, Kuwait, Mexico, Oman, Pakistan and UAE.  To disrupt for good takes a rebellious spirit, a questioning mind and a warm heart. We really care about how to get things done and not who manages who. We benefit from our diversity, and together, we disrupt the way we and others thinking about our lives for good.   Do you want to exchange ideas, learn from each other and leave your mark on our journey? This is the place for you. </div>Role Overview  We’re looking for an experienced Infrastructure Engineer to own the reliability, performance, and security of our on-prem data center and network—centered on Cisco Nexus 9000 (NX‑OS) switching and FortiGate firewalls—alongside our Dell VxRail hyperconverged platform and Microsoft workloads. You will lead day‑to‑day operations, project delivery, and lifecycle management for core network, security, compute, storage, and critical services.  Key Responsibilities: Network (Primary)  <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1">Core Switching (Cisco Nexus 9K C93240YC‑FX2): Design, implement, and maintain VLANs, VPC, vPC peer‑link/keepalive, HSRP/VRRP (if used), QoS, and ACLs on NX‑OS. Manage EVPN/VXLAN (if applicable) and L2/L3 segmentation, including route‑maps, BGP/OSPF where used. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="2" data-aria-level="1">Access/Edge & Routing: Maintain interconnects to firewalls, load balancers, ISPs, and campus/branch devices. Capacity planning, link upgrades, optics selection, and redundancy testing. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="3" data-aria-level="1">Network Monitoring & Troubleshooting: Use NetFlow/sFlow, SNMP, syslog, and tools (e.g., SolarWinds/PRTG) to monitor health and performance. Root cause analysis for latency, drops, asymmetric routing, or microbursts. </li> </ul> Security (Fortinet)  <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="4" data-aria-level="1">FortiGate (e.g., 601E, 201E): Manage policy packages, NAT, zones, interfaces, VDOMs, IPSec/SSL VPN, routing, and high availability. Configure UTM features (Application Control, Web Filtering, IPS) according to policy. Periodic ruleset review, cleanup, and documentation (change control). </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="5" data-aria-level="1">FortiManager/FortiAnalyzer (if present): Centralized policy management, revisions, audits, and traffic/security analytics. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="6" data-aria-level="1">Security Posture: Implement network segmentation and least‑privilege access; support SFTP, RDS, and secure remote access. Coordinate vulnerability remediation (firmware/OS upgrades, CVE mitigation). </li> </ul> Compute, Storage & Virtualization  <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="7" data-aria-level="1">Dell VxRail (vSphere): Cluster operations, lifecycle upgrades, vSAN health, capacity planning, and performance tuning. VM provisioning standards, templates, tagging, and backup integration. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="8" data-aria-level="1">Windows Server / AD / RDS: Support core services (AD/DNS/DHCP/PKI/NPS), Remote Desktop Services collections/brokers, and GPO hygiene. Maintain file services, secure shares, and SFTP services (OpenSSH on Windows/Linux). </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="9" data-aria-level="1">Linux (Nice-to-have): Basic admin for bastion/utility hosts, SSH hardening, and automation agents. </li> </ul> Required Qualifications: <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="10" data-aria-level="1">8+ years in enterprise network/infrastructure engineering roles. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="11" data-aria-level="1">Hands‑on with Cisco Nexus (NX‑OS): vPC, LACP, STP enhancements, VXLAN/EVPN (preferred), routing (BGP/OSPF), QoS, and NX‑OS upgrades (ISSU when applicable). </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="12" data-aria-level="1">Proven experience with FortiGate firewalls: Policy/NAT design, VPNs (IPSec/SSL), HA pairs, virtual domains, security profiles, and firmware lifecycle. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="13" data-aria-level="1">Strong knowledge of TCP/IP, IPv4 subnetting, DNS/DHCP, NTP, and PKI. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1">Experience with VMware/vSphere (ideally with VxRail), Windows Server/AD/RDS, and basic Linux. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="15" data-aria-level="1">Proficiency in PowerShell/Bash, and familiarity with automation (Ansible, REST APIs, or Terraform desirable). </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="16" data-aria-level="1">Solid understanding of network security best practices, segmentation, and logging/SIEM integration. </li> </ul> Preferred Certifications: <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="17" data-aria-level="1">Cisco: CCNP Data Center or Enterprise (CCIE a plus). </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="18" data-aria-level="1">Fortinet: NSE 4+ (NSE 5/6/7 a plus). </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="19" data-aria-level="1">VMware: VCP‑DCV (VxRail cert a plus). </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="20" data-aria-level="1">Microsoft: Azure Administrator/Network, Windows Server Hybrid Administrator. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="21" data-aria-level="1">ITIL Foundation. </li> </ul><div class="content-conclusion">What we offer: <ul> <li>Rapid learning opportunities - we enable learning through flexible career paths, exposure to challenging & meaningful work that will help build and strengthen your expertise.</li> <li>Hybrid work environment - flexibility to work from home 2 days a week in our UAE & Pakistan offices.</li> <li>Healthcare and other local benefits offered in market.</li> </ul> By submitting your application, you acknowledge and consent to the use of Greenhouse & BrightHire during the recruitment process. This may include the storage and processing of your data on servers located outside your country of residence. For further information, please contact us at dataprivacy@beyond.one.</div>

741,000+ hidden jobs like this

Beyond ONE and thousands of companies post here first — often days before LinkedIn or Indeed. Your first 5 applications are free; go Pro to apply without limits.

Everything Pro unlocks:

Unlimited applications — free stops at 5
Track every application in one place
Apply straight to the source, one click
Save & organize roles you love
Roles pulled from company boards before the big sites

Weekly

$9.99

$4.99/week

For an active search. Cancel anytime.

Get Weekly

Monthly

$24.99

$12.99/month

The smart pick. Save 35% vs weekly.

Get Monthly

Lifetime

$99

$49.99once

Pay once. Every future feature, forever.

Get Lifetime