A Networking Engineer (CCNA-level) is responsible for auditing and analyzing the existing network infrastructure, including switches, VLANs, and Layer 2/Layer 3 architecture. The role involves performing technical due diligence to assess network design, performance, security, and risks, identifying gaps or misconfigurations, and documenting current-state findings. The engineer prepares a concise, decision-oriented report that highlights risks, improvement areas, and actionable recommendations to support management decisions on optimization, upgrades, or remediation.This is a 3 months role on contractual base and inside IR35

Responsibilities – Network Infrastructure Audit & Due Diligence

1. Network Infrastructure Audit

• Conduct a comprehensive audit of existing network infrastructure, including LAN, WAN, WLAN of on premise and data center networks.
• Review and document network topology, physical and logical layouts
• Audit network devices such as switches, routers, firewalls, access points, and load balancers
• Validate hardware models, firmware versions, licensing, and lifecycle status
• Identify single points of failure and redundancy gaps

2. Switch & VLAN Assessment

• Analyze Layer 2 and Layer 3 switch configurations
• Review VLAN design, segmentation strategy, and VLAN-to-subnet mapping
• Validate trunking, access ports, STP configuration, port security, and QoS policies
• Identify misconfigurations, unused VLANs, and security risks
• Assess scalability and performance impact of current VLAN architecture

3. Network Layer & Architecture Analysis

• Evaluate OSI layer implementation (L2, L3 focus)
• Assess routing protocols, IP addressing schemes, and subnetting efficiency, review inter-VLAN routing, gateway placement, and traffic flow
• Validate network design best practices and industry standards compliance

4. Performance & Security Review

• Assess network performance, bandwidth utilization, and latency issues, Identify bottlenecks and congestion points
• Review basic network security controls (ACLs, port security, VLAN isolation), Highlight potential vulnerabilities and compliance gaps

5. Due Diligence & Risk Assessment

• Perform technical due diligence on existing network assets, assess operational risks, technical debt, and upgrade dependencies
• Identify end-of-life (EOL) and end-of-support (EOS) equipment, evaluate business impact risks related to availability, scalability, and security

6. Documentation & Reporting

• • Create detailed network audit documentation, including:
  • Network diagrams (logical & physical)
  • VLAN and IP addressing tables
• Generate a comprehensive audit and due diligence report

7. Decision-Oriented Reporting (Decisional Values)

• Provide clear findings, risk ratings, and impact analysis
• Classify recommendations as:
  • Immediate (Critical Risk)
  • Short-term (Optimization)
  • Long-term (Strategic Improvement)
• Present cost vs. benefit insights for remediation options

Offer executive-ready recommendations to support decision-making