Lead Network Engineer (Administrator)

Velpharm Group is a leading player in the pharmaceutical industry, specializing in the development, production, and distribution of medicinal products.

We strive for innovation and improving the quality of life for people around the world.

Vacancy: Lead Network Engineer (Administrator)

Responsibilities:

Strategy and Development: Planning and designing the company's scalable network infrastructure, developing the team and operational processes.

Infrastructure Management: Ensuring stable, fault-tolerant, and secure network operation, including inter-branch communication and remote access.

Specialized Services:

Administration of corporate IP telephony (Xorcom).

Management of Wi-Fi wireless network (Eltex SoftWLC controllers).

Ensuring the information security of the network perimeter.

Monitoring and Reporting: Monitoring the availability and performance of network services, maintaining technical documentation, and developing network diagrams.

We expect you to have:

In-depth knowledge of the TCP/IP stack, OSI model.

Proficient in routing protocols: BGP (iBGP, eBGP), OSPF, GRE.

Understanding of gateway redundancy protocols (HSRP, VRRP) and link aggregation (LACP, Etherchannel).

Experience in traffic analysis (tcpdump, Wireshark).

Equipment and Vendors:

Experience administering Cisco equipment (including ASA), Huawei, Eltex, MikroTik.

Important: Experience with UserGate (firewalls) and S-Terra (crypto gateways/VPN) products will be an advantage, as this is a priority area for modernization.

Related Technologies and OS:

Administration of server OS: Windows Server, Linux (any distribution).

Understanding of directory and authentication services: AD, Tacacs, Radius.

Configuration of DNS, DHCP, GP.

Experience with virtualization systems (VMware).

Infrastructure and Hardware:

Experience in building geographically distributed and fault-tolerant networks.

Knowledge of Dell server hardware, storage systems (SAN), and network storage (Synology, QNAP) at the administration and hardware understanding level.

Experience with monitoring systems (Zabbix, NetXMS).

Security and Specialized Protocols:

Understanding of information security principles and experience implementing technical security measures (NAT, ACL, port security, DHCP snooping, ARP Inspection, IPSec).

Knowledge of VLAN, STP, LLDP, SIP.

Experience in building and managing Wi-Fi networks (Eltex SoftWLC).

Knowledge of Xorcom IP telephony.

Personal Qualities and Other Skills:

Ability to design and visualize networks (creating diagrams in any editor).

Systemic thinking, responsibility for results, readiness to develop the team.

Priority Tasks (Projects for the near future):

The priority for the coming months is a large-scale modernization of the network infrastructure, including two key stages:

Network Edge Modernization (Internet Perimeter): Replacing existing solutions with next-generation firewalls (NGFW) of domestic production UserGate.

Communication Channel Modernization (VPN): Reorganization of secure communication channels between offices. Replacing outdated equipment with certified S-Terra crypto gateways to ensure compliance with information security requirements.

Conditions:

Work in an accredited IT company.

Remote work format with occasional office and production site visits as needed.

Employment according to the Labor Code of the Russian Federation from day one.

Work schedule: 5/2; 8-hour days.

Corporate training, opportunities for professional growth.

Join Velpharm Group – the future of pharmaceuticals starts here!