On-site L1 Network Engineer

The On-site L1 Network Engineer is the physical hands-and-eyes network presence at Healthcare facilities, responsible for first-line network operations, smart-hands support, structured cabling integrity, edge device health, and rapid response to site-level network incidents. Because clinical workflows-bedside devices, nursing stations, PACS workstations, biomedical equipment, Wi-Fi-connected infusion pumps, VoIP phones, and access systems-depend on a stable network at the edge, the role plays a direct part in maintaining patient-care continuity. The engineer executes documented procedures, supports the Network Engineering team's L2/L3 instructions, performs daily site walks, and ensures that all site network infrastructure remains compliant with cybersecurity, ADHICS, and DoH operational standards.

2. Key Responsibilities

• Provide on-site L1 network support for all assigned hospital and clinical buildings during business hours and on-call windows.
• Perform daily physical inspection of network rooms, IDF/MDF cabinets, environmental conditions, cable trays, and labeling.
• Execute smart-hands tasks under L2/L3 direction-port replacements, transceiver swaps, cable re-termination, device reseating, console access.
• Respond to user-reported and NOC-detected site network incidents-port-down, link flaps, AP outages, VoIP, printers, biomedical connectivity.
• Replace failed network components (SFPs, patch cords, access points, IP phones, switches under L2 guidance) per documented procedures.
• Support new device onboarding-wiring, port allocation, VLAN assignment requests, NAC enrollment, and physical labeling.
• Operate NAC (e.g., Cisco ISE, Aruba ClearPass) at L1 level-endpoint admission, MAC authentication bypass requests, guest access, troubleshooting denied-access events.
• Support structured cabling moves, adds, and changes (MAC)-patching, re-patching, cable management, label updates.
• Execute approved changes on assigned site equipment under change-control supervision; never make unauthorized changes.
• Maintain accurate, up-to-date physical and logical network documentation for the assigned site-port maps, patch schedules, AP locations, IDF diagrams.
• Support planned maintenance, downtime windows, biomedical projects, hospital expansions, and clinical go-lives.
• Coordinate with cabling vendors, OEMs, and ISP field teams during installations and faults.
• Maintain the local spares inventory-SFPs, patch cords, power adapters, transceivers-and request replenishment in time.
• Provide ground-level visibility to the central NOC and Network Engineering team during all site network events.
• Support audit walks and produce site-level evidence-labeling compliance, cabinet hygiene, device inventory, environmental compliance.
• Participate in on-call rotation for the assigned site to support after-hours incidents.

3. Technical Responsibilities

• Operate Cisco / Aruba / Juniper switches at L1-interface checks, link state, basic configuration verification under L2 supervision.
• Operate enterprise wireless infrastructure-Cisco / Aruba / Meraki access points; perform AP swap, RMA, and basic RF troubleshooting.
• Support NAC platforms-Cisco ISE, Aruba ClearPass-at L1 (endpoint registration, MAC bypass requests, troubleshooting denied access).
• Use console and KVM access tools for device recovery.
• Operate IP phones (Cisco Webex, Avaya, or equivalent) at L1-registration, replacement, basic troubleshooting.
• Run basic L1 diagnostics-ping, traceroute, ARP, interface counters, cable testing, optical power readings.
• Use cable testers, fiber inspection scopes, and link analyzers.
• Use ITSM tools-ServiceNow / Remedy-to log, update, and close every action.
• Maintain physical network inventory and CMDB updates for the site.
• Support biomedical and clinical-engineering connectivity within the network domain (excluding clinical configuration of devices).

4. Compliance and Governance Responsibilities

• Adhere to cybersecurity policies, ADHICS controls, and physical access procedures for all network rooms.
• Never connect unauthorized devices to the production network; report any rogue devices to the SOC.
• Enforce labeling, cabling, and cabinet hygiene standards aligned with structured-cabling and ADHICS expectations.
• Ensure all physical access to network rooms is logged and approved.
• Support quarterly access reviews and physical audits of MDF/IDF rooms.
• Maintain accurate CMDB records for all network assets at the site, including serial numbers and lifecycle data.
• Follow PHI and clinical-area handling protocols when working in patient zones.
• Provide audit evidence on request-port maps, device inventories, change records, environmental reports.
• Participate in vulnerability remediation activities under L2/L3 guidance-firmware swaps, device replacements, configuration changes.
• Never bypass NAC, port security, or other access control mechanisms.

5. Required Technical Skills

• Working knowledge of LAN/WLAN infrastructure
• Cisco / Aruba switching at L1 level
• Enterprise wireless-Cisco / Aruba / Meraki
• NAC platforms-Cisco ISE, Aruba ClearPass
• Structured cabling (Cat6/6A, fiber MM/SM, MPO)
• IP telephony basics
• ITSM operations-ServiceNow / Remedy
• Basic firewall awareness (Palo Alto, Fortinet, Check Point)
• Cable testing, fiber inspection, optical power measurement
• Familiarity with healthcare-environment networking (medical IoT, biomedical devices)

6. Required Experience

• Minimum 2-3 years of hands-on enterprise network operations experience.
• Experience supporting multi-site enterprise environments with structured cabling.
• Healthcare, airport, telecom, government, or other large-campus environment experience preferred.
• Experience working with NAC, enterprise Wi-Fi, and IP telephony.
• Field exposure to data center smart-hands and IDF/MDF operations.

7. Required Certifications

Mandatory

• Cisco CCNA (current) OR Aruba ACA-Switching/Wireless

Preferred

• CompTIA Network+
• BICSI Installer 1 / Installer 2 (cabling)
• Vendor-specific wireless certification (Cisco CMNA, Aruba ACMA)
• ITIL 4 Foundation
• Cisco CyberOps Associate (security awareness)

8. Education Requirements

• Diploma or Bachelor's degree in Computer Networking, IT, or related discipline.
• Equivalent vendor training plus relevant experience may be considered.

9. Soft Skills and Behavioural Competencies

• Hands-on, dependable, and physically present where the work happens
• Disciplined in following procedures and change controls
• Clear and timely communication with the NOC and L2/L3 teams
• Patient and professional manner with clinical staff and patients in shared spaces
• Strong documentation discipline (port maps, cabinet photos, CMDB)
• Ownership through to closure of every site ticket
• Calm response under pressure during clinical-impacting incidents
• Readiness for on-call, weekend changes, and emergency response
• Compliance and safety mindset in clinical environments

10. Key Interfaces

• Network Engineering / Network Operations Team
• Cybersecurity and Network Security Teams
• NOC and Service Desk
• Site IT Manager and Hospital Operations
• Biomedical Engineering and Clinical Engineering
• Cabling, OEM, and ISP vendors
• Application teams during go-lives
• Internal Audit and Compliance during site walks

11. Success Measures and KPIs

• Site network availability ≥ 99.9% (in scope of L1 actions)
• L1 incident response on-site within agreed SLA-target ≥ 98%
• Smart-hands actions executed correctly first time-target ≥ 95%
• Cabinet hygiene and labeling compliance-100% during quarterly audits
• CMDB accuracy for site network assets-100%
• Spares inventory availability-zero stock-outs of critical SKUs
• Audit findings related to physical network at site-zero repeat findings
• Change execution success rate-≥ 98% with zero unauthorized changes
• Documentation completeness for site network-≥ 95%

12. Tools and Technologies

Category / Tool

Category / Tool

Cisco / Aruba / Juniper switches

Cisco / Aruba / Meraki wireless

Cisco ISE / Aruba ClearPass (NAC)

Cisco Webex / Avaya IP telephony

Console / KVM tools

Cable testers and fiber inspection tools

ServiceNow / BMC Remedy / Manage Engine

DCIM / cabinet management tools

Solarwinds NPM / Cisco DNA Center (read view)

Label printers, structured cabling tools

13. Working Conditions

• On-site presence at the assigned hospital or clinical facility
• Standard business hours plus on-call rotation for after-hours site events.
• Physical work in IDF/MDF rooms, cable trays, ceiling spaces, and patient areas with appropriate PPE.
• Strict adherence to hospital infection-control, hygiene, and access protocols.
• Weekend / overnight activity for cutovers, expansions, and go-lives.

Salary-Market Standard