Cisco Ise L2 – Senior Network Engineer

Job Description – Sr. Network Engineer (L2)

Role: L2 – Senior Network Engineer
Experience Required: 4–8 Years
Employment Type: Permanent
Job Location: Gurugram
Working Days: 5 Days a Week

Job Overview

We are looking for an experienced L2 Senior Network Engineer with strong expertise in network operations, monitoring, troubleshooting, and infrastructure support. The role involves managing day-to-day network operations, monitoring network health, resolving L2 issues, and executing configuration changes under defined SOPs and guidance from L3 teams.

Key Responsibilities

1. Cisco DNAC Support

• Monitor network health, device compliance, and assurance dashboards.

• Assist in provisioning switches and access points using DNAC templates.

• Generate and analyze DNAC reports, including inventory, SWIM, topology, and client health.

• Perform basic troubleshooting of synchronization failures and telemetry issues.

2. Cisco ISE (NAC / EAP-TLS / MDM / RADIUS / TACACS+)

• Monitor authentication logs and troubleshoot 802.1X authentication failures (EAP-TLS, PEAP).

• Verify endpoint posture assessments and MDM compliance status.

• Troubleshoot user and machine certificate-related issues.

• Perform ISE node and PSN health checks.

• Handle basic ISE operations, including endpoint addition, profiling checks, and session clearing.

• Escalate complex authentication and policy-related issues to L3 teams.

3. Cisco ThousandEyes

• Monitor agent health, alerts, and network performance.

• Validate synthetic tests and endpoint agent functionality.

• Troubleshoot basic connectivity and agent installation issues.

4. Fortinet – FortiGate, FortiAnalyzer & FortiManager

• Monitor firewall logs and security alerts through FortiAnalyzer.

• Assist with firewall rule reviews and rule lifecycle management.

• Execute standard configuration updates through FortiManager under guidance.

• Perform basic troubleshooting of VPN connectivity, interface flaps, and routing issues.

5. IT Asset Management

• Maintain and update network inventory, including switches, access points, routers, and firewalls.

• Track firmware versions, EOL/EOS status, and compliance requirements.

• Assist with spare inventory management and RMA coordination.

6. LAN Switching – Cisco / Brocade / Nexus

• Troubleshoot access-layer network issues involving VLANs, trunking, and STP.

• Perform switch port configuration, MAC address tracing, and interface health checks.

• Handle basic Cisco Nexus operations, including vPC checks and interface monitoring.

• Perform configuration backups and restoration activities.

7. Scripting & Automation Support

• Execute pre-built scripts using Python, Bash, and Ansible for routine automation tasks.

• Assist in log collection, report generation, and operational activities using automation tools.

8. DHCP Support

• Troubleshoot IP address conflicts and DHCP scope exhaustion.

• Validate DHCP leases and address assignment logs.

• Check DHCP relay configurations (IP Helper) and related connectivity issues.

9. NIPS (Network Intrusion Prevention System)

• Monitor intrusion alerts and security events.

• Perform initial analysis of suspicious network activity and escalate findings to relevant teams.

• Validate sensor health and connectivity.

10. Cisco Wireless LAN Controller (WLC)

• Troubleshoot wireless client connectivity issues, including authentication failures, DHCP, and roaming.

• Monitor wireless controller and access point health.

• Modify WLAN configurations as per defined SOPs.

• Troubleshoot RF parameters, AP join issues, and client load-related problems.

Required Skills & Qualifications

• Strong understanding of L2/L3 networking fundamentals, including VLANs, STP, EtherChannel, DHCP, and basic routing.

• Hands-on experience in network monitoring, operations, and L2 troubleshooting.

• Familiarity with Cisco DNAC, Cisco ISE, Cisco ThousandEyes, and Cisco WLC.

• Working knowledge of Fortinet solutions – FortiGate, FortiAnalyzer, and FortiManager.

• Understanding of 802.1X authentication mechanisms, including EAP-TLS and PEAP.

• Familiarity with troubleshooting tools such as Wireshark, DNAC Assurance, ThousandEyes, and FortiAnalyzer.

• Basic scripting knowledge in Python, Bash, or Ansible.

• Good documentation, incident management, and change management skills.

Experience Requirements

• 4–8 years of relevant experience in Network Operations, Network Support, or Infrastructure Support.

• Experience in monitoring, troubleshooting, and executing network changes in an enterprise environment.

• Ability to handle L2 operational issues independently and coordinate with L3 teams for complex escalations.