JOB OPPORTUNITY

The Caribbean Community (CARICOM) Implementation Agency for Crime and Security (IMPACS) established by the CARICOM Heads of Government, is seeking suitably qualified individuals to fill the following position:

NETWORK ENGINEER

OPEN TO ALL CARICOM NATIONALS

JOB SUMMARY

The Network Engineer is responsible for designing, implementing, securing, and managing mission-critical network infrastructure across AWS, Azure, and on-premise datacenters. This includes cloud networking (VPCs, VNets, VPNs, gateways), firewalling and reverse proxying (PfSense, HAProxy), and virtualization (Proxmox VE). The Network Engineer will ensure high availability, a strong security posture, optimized performance, and seamless hybrid connectivity. This role supports enterprise projects, security initiatives, cloud migrations, and the operational stability of regional and national systems.

JOB FUNCTIONS

1. Hybrid Cloud Network Architecture (AWS and Azure)
   • • Design, deploy, and manage AWS VPCs and Azure VNets, including subnets, routing tables, security groups, and peering.
       • • Implement hybrid connectivity solutions such as AWS Direct Connect, Site-to-Site VPN, Azure ExpressRoute, and Virtual WAN.
           • • Configure cloud load balancers (AWS ALB/NLB, Azure Application Gateway).
             • Secure cloud networks with NSGs, NACLs, WAF, and Zero-Trust principles.
               1. On-Premise Network Engineering (PfSense, HAProxy, Cisco, Dell, Ubiquiti)
                  • • Design and deploy LAN/WAN, DMZs, IPSec/OpenVPN tunnels, VLANs, and NAT rules using PfSense.
                      • • Implement HAProxy for load balancing, SSL termination, and reverse proxying.
                        • Administer routers, switches, and Wi-Fi infrastructure (Cisco, Dell, Avaya, Ubiquiti).
                        • Maintain Cloudflare WAF, load balancing, and DNS optimization.
                          1. Virtualization and Datacenter Infrastructure (Proxmox VE)
                             • • Deploy and maintain Proxmox VE clusters, Ceph storage, KVM VMs, and LXC containers.
                                 • • Manage SDN, bonded interfaces, bridges, and VLAN-tagged networks.
                                   • Perform patching, snapshot management, and HA configuration.
                                   • Support DR/backup and failover testing.
                                     1. Security, Compliance and Monitoring
                                        • • Enforce ISO 27001, CIS Benchmarks, and enterprise controls.
                                          • Configure IDS/IPS (Snort, Suricata, Security Onion).
                                          • Implement TLS/SSL, certificate management, centralized logging, and monitoring.
                                          • Conduct vulnerability assessments, audits, and RCA.