Senior Infrastructure Engineer

(Bucharest, onsite, project-based)

For one of our clients in the global automation and enterprise software industry, a worldwide leader renowned for transforming how organizations scale, operate, and innovate through automation, we are looking for a Senior Infrastructure Engineer to join a high-impact, project-based initiative in Bucharest.

This role sits at the heart of a distributed IT & Infrastructure team, supporting a complex, multi-site environment undergoing critical upgrades. The ideal candidate will bring deep technical ownership, hands-on execution, and the ability to drive infrastructure excellence across a globally integrated ecosystem.

Core Technical Proficiencies

1. Cisco Meraki (Full Stack):

• Meraki Dashboard: Expert-level proficiency in managing all aspects of the Meraki cloud dashboard, including claiming/unclaiming devices, creating network templates, and monitoring.

• Meraki MS (Switching): Deep knowledge of configuring Meraki switches, including VLAN tagging (802.1Q), link aggregation (LACP), port configuration (access/trunk), and Spanning Tree Protocol (STP) management.

• Meraki MR (Wireless): Ability to deploy, configure, and secure Meraki access points. This includes setting up SSIDs, configuring authentication (WPA2/3-Enterprise/PSK), managing RF profiles, and setting up splash pages or guest networks.

• Meraki MX (Security/SD-WAN): Experience with MX appliance configuration for basic routing, NAT, and (if used) Auto VPN tunnels.

2. Fortinet (Security):

• FortiGate & FortiOS: Hands-on experience deploying and managing FortiGate firewalls. The candidate must be comfortable with the FortiOS command line (CLI) and GUI.

• Firewall Policies: Ability to create, manage, and troubleshoot granular firewall policies (IPv4/IPv6), including traffic shaping and QoS.

• VPN Configuration: Proven experience building and maintaining secure IPsec site-to-site tunnels (often from this branch to a corporate hub/HQ) and remote access VPNs (SSL-VPN/FortiClient).

• Security Profiles: Familiarity with configuring Fortinet's security features, such as Antivirus, Web Filtering, Application Control, and Intrusion Prevention (IPS).

3. Core Networking & Protocols:

• Qualifications: Cisco CCNA (as a baseline) is required, demonstrating a solid understanding of fundamentals. A Fortinet NSE 4 (or higher) certification is strongly preferred.

• Routing & Switching: Solid understanding of TCP/IP, DNS, DHCP, and routing protocols (Static, OSPF, BGP). Must be able to design and implement a scalable VLAN and IP addressing scheme.

• Network Security: Deep understanding of network segmentation, access control lists (ACLs), and the principles of a zero-trust architecture at the branch level.

Physical & "Soft" Skills

• Physical Installation: This is a "forklift" project, so the contractor must be willing and able to physically install the equipment. This includes racking and stacking devices, professional cable management (patch panels, fiber/copper patching), and connecting power.

• Documentation: Ability to create "as-built" documentation, including network diagrams (LLD), IP schemas, and configuration notes for handover.

• Troubleshooting: Must be a systematic and effective troubleshooter who can isolate and resolve issues at all layers (Physical, Data Link, Network, Application) during and after the cutover.

Show more
Show less