Manager: IT Networks at National Health Laboratory Services

Key Job Responsibility 

• Network Architecture, Design & Standards: Design and maintain NHLS LAN/WAN architecture, including campus, branch, and data centre connectivity.
• Define network standards: IP addressing, VLAN segmentation, routing design, wireless standards, naming conventions, configuration baselines, and documentation requirements. Develop and maintain a network roadmap aligned to NHLS operational priorities, resilience needs, and approved IT strategy. Perform technology evaluations and provide recommendations supported by business cases, risk assessments, and lifecycle considerations.
• LAN Operations & Data Centre Switching: Manage LAN switching infrastructure (access, distribution, core) across NHLS facilities to ensure stable and scalable service delivery. Ensure high availability at critical sites through resilient design (e.g., redundancy, link aggregation, spanning-tree design, and failover planning). Oversee implementation and support of wired access services, including QoS for latency-sensitive systems and traffic prioritisation where required. Manage network refresh cycles, firmware upgrades, and configuration standardisation with change control compliance.
• WAN & Site Connectivity Management: Manage WAN connectivity services, including primary and secondary links where applicable, ensuring service continuity and performance. Oversee integration with national research/health networks and service providers (where applicable) and ensure stable routing and traffic engineering. Implement and manage SD WAN (where applicable) to improve branch resiliency, application performance, and operational visibility. Maintain uptime, latency, and throughput targets for critical NHLS sites and services.
• Network Security & Firewall Management (Primary Accountability): Own and administer NHLS network security controls including firewalls, perimeter security, segmentation, and controlled ingress/egress policies.
• Manage firewall rule lifecycle: requests, risk assessment, approvals, implementation, recertification/review, and documentation. Implement secure remote access mechanisms (VPN/zero trust components where applicable), including strong authentication and least privilege principles. Coordinate response to network security incidents (e.g., suspicious traffic, DDoS indicators, rule misconfigurations, malware propagation), ensuring containment and evidence collection aligned with NHLS processes. 
• Monitoring, Incident Management & Problem Management: Ensure comprehensive network monitoring and alerting (availability, performance, capacity, security events) using approved tools. Lead incident resolution for network outages or degradation, provide escalation support, and coordinate cross-functional restoration efforts. Drive problem management to eliminate recurring network incidents through root cause analysis and corrective action implementation. Establish and maintain operational runbooks, troubleshooting guides, and service restoration procedures.
• Network Access Control & Segmentation Controls: Implement and maintain network access controls (e.g., NAC capabilities where applicable) to control endpoint access and reduce risk. Enforce segmentation and zoning for clinical/lab systems, server networks, user networks, guest networks, and management networks. Maintain security posture through continuous improvement of access policies and device compliance enforcement mechanisms.
• Change, Configuration & Asset Management: Ensure all network changes follow NHLS change management processes (planning, approvals, implementation, rollback, post-implementation review). Maintain an accurate inventory of network assets and critical configuration items (CMDB or equivalent). Manage configuration backups, standard templates, and secure storage of device configurations.
• Vendor, Contract & Financial Management: Manage network vendor relationships and service providers, including SLA governance and service performance reviews. Support procurement processes: drafting specifications, evaluating bids/quotes, and supporting contract renewals. Contribute to budgeting for network refresh projects, maintenance contracts, licensing, and connectivity costs.
• People Leadership & Capability Development: Lead and mentor network support engineers: task allocation, prioritisation, performance management, and coaching. Identify skills gaps and drive training/certification plans in networking and network security disciplines. Build an operational culture of documentation, proactive maintenance, high-quality change management, and customer-focused service delivery.
• Governance, Compliance, Documentation & Reporting: Provide monthly reporting on network availability, incident trends, security posture, firewall changes, and operational risks. Support audit activities and ensure audit-ready evidence for network controls (firewall rule reviews, change records, monitoring evidence, access control evidence). Maintain updated network diagrams (logical and physical), IP/VLAN plans, and site connectivity documentation. 

Minimum requirements & key competency 

• Bachelor’s Degree / Advanced Diploma (NQF 7) in Information Technology or Related Cisco Certified Network Professional (CCNP) IT service management certification (ITIL Foundation) advantageous 8 years in enterprise networking roles supporting LAN/WAN environments 3–5 years leading a network team Demonstrated experience managing enterprise firewall platforms and implementing security network controls Proven ability to deliver network refresh projects and multi-site connectivity improvements Valid Driver’s License