SD-WAN L2 Engineer

Location: Nairobi, Kenya Experience: 3 - 6 years in Networking, including 2+ years hands-on SD-WAN Working Hours: Rotational shifts + on-call support Reporting to: NOC Manager / Network Operations Manager We are looking for an experienced SD-WAN L2 Engineer to provide advanced troubleshooting, configuration and operational support across multivendor SD-WAN environments. The role will own escalated incidents, execute approved changes and provide technical guidance to L1 engineers.

Key Responsibilities

Troubleshoot escalated SD-WAN, routing, tunnel, security and application performance issues.

Diagnose overlay/underlay failures, packet loss, latency, jitter, MTU and routing issues.

Configure and troubleshoot traffic steering, QoS, segmentation and WAN failover.

Support device onboarding, configuration deployments, replacements, upgrades and backups.

Troubleshoot BGP/OSPF, IPsec VPNs, NAT and LAN/WAN integration.

Execute approved changes with proper validation and rollback procedures.

Analyze logs and packet captures and conduct root cause analysis.

Coordinate with OEMs, ISPs, field engineers and customers during incidents.

Mentor L1 engineers and maintain technical documentation and SOPs.

Technical Expertise

Cisco Catalyst SD-WAN (Viptela): vManage, vSmart, vBond, cEdge/vEdge, OMP, TLOCs, BFD, IPsec, policies & segmentation.

VMware SD-WAN (VeloCloud): Orchestrator, Edges, Gateways, Business Policies, DMPO, HA & routing integration.

Fortinet Secure SD-WAN: FortiGate, FortiManager, FortiAnalyzer, SD-WAN rules, IPsec, routing & HA.

Strong knowledge of TCP/IP, BGP, OSPF, VLANs, NAT, QoS, IPsec and network segmentation.

Experience with MPLS, leased lines, broadband and LTE/5G backup links.

Proficiency in CLI troubleshooting, packet capture and incident/change management.

Requirements

3 – 6 years of networking experience, including 2+ years hands-on SD-WAN support.

Strong expertise in at least one listed SD-WAN platform and working knowledge of the others.

Degree/Diploma in IT, Computer Science, Engineering or equivalent experience.

CCNP or relevant vendor certification preferred.

Strong communication, incident ownership and documentation skills.

Scripting, API or network automation knowledge is an advantage.