L2 Network Operations Engineer (LAN & Wireless)

Experience Level:3–6 Years

Location: RCP

Payroll: Quess Corp Ltd

1. Job Summary (The Core Focus)

We are seeking a skilled L2 Network Operations Engineer to provide advanced support for our enterprise internal network, specializing in LAN Switching, Wireless (Wi-Fi), and Cisco ISE (NAC). This role is the technical escalation point for L1 support, responsible for handling complex incidents, performing deep-dive troubleshooting (packet analysis, logs), and executing changes under strict change management processes to ensure secure and stable internal connectivity.

2. Key Responsibilities (Consolidated)

The L2 Engineer owns advanced operational support and troubleshooting across the following domains:

LAN Switching Operations (L2 Responsible)

· Incident Resolution: Resolve complex Layer 2 issues including Spanning Tree (STP) loops, VLAN mismatches, and broadcast storms.

· Port-Level Diagnostics: Analyze physical layer faults such as CRC errors, duplex mismatches, and port flapping to identify cabling or hardware issues.

· Change Management: Execute changes under the Change Advisory Board (CAB) process, such as creating new VLANs, configuring EtherChannels (LACP), and updating Port Security settings.

· Maintenance: Assist the L3 team with switch IOS upgrades, stack provisioning, and hardware refreshes.

b) Wireless (Wi-Fi) Operations (L2 Responsible)

· Advanced Troubleshooting: Resolve escalated user issues regarding AP flapping, high interference, coverage holes, and roaming failures.

· WLC Management: Troubleshoot Client-to-AP and AP-to-Controller connectivity, including CAPWAP tunnel analysis.

· Configuration: Implement changes to SSIDs, QoS profiles, and RF group tuning based on site survey data.

· Authentication Flow: Debug client authentication failures (802.1x/PSK) by tracing the flow from the Client AP WLC & ISE.

c) Cisco ISE / NAC Operations (L2 Responsible)

· Security Troubleshooting: Analyze ISE Live Logs and RADIUS details to determine why devices are rejecting auth or falling into the wrong VLAN.

· Endpoint Management: Troubleshoot MAB (Mac Auth Bypass) and Dot1x issues for wired and wireless clients.

· Profiling: Validate that devices (Printers, IoT, Laptops) are being correctly profiled and applying the right policies.

· Health Checks: Monitor the health of ISE nodes (Disk usage, Replication status, Sync issues)

3. Technical Skills (Required)

• Switching: Deep knowledge of VLANs, 802.1Q Trunking, Spanning Tree (RSTP/PVST+), and EtherChannel. Understanding of Inter-VLAN routing and Gateway Redundancy (HSRP/VRRP).
• Routing: Basic knowledge of OSPF and BGP.
• Wireless: Strong understanding of RF Fundamentals (SNR, RSSI), roaming behavior, and WLC architectures.
• Security (NAC): Ability to read RADIUS/TACACS+ logs, understand EAP flows, and troubleshoot Change of Authorization (CoA).
• Tools: Proficient in Wireshark (Packet Analysis), SolarWinds, and CLI commands.

4. Soft Skills & Qualifications

• Mindset: Strong RCA (Root Cause Analysis) mindset and a commitment to clear, technical documentation.
• Collaboration: Ability to explain technical issues to non-technical stakeholders and mentor L1 support staff.
• Education: Bachelor’s degree in IT, Computer Science, or equivalent.
• Experience: 4–6 years of hands-on experience in Enterprise Network Operations.
• Certifications: [To be added by the user, e.g., CCNA/CCNP]