Network Lead
Summary
Senior network lead (10–15 yrs) based in Goa, India, who designs, deploys, and runs enterprise Cisco networks day to day: routing/switching (OSPF, BGP, HSRP), SD-WAN via vManage, DNA Center automation, wireless (WLC/APs), and Firepower/ASA firewalls, with incident RCA and documentation. CCNP Enterprise is mandatory.
Role & responsibilities
- Design and deploy robust network architecture using Cisco routing, switching, and wireless technologies.
- Lead the configuration, troubleshooting, and optimization of Cisco routers and switches (OSPF, BGP, EIGRP, HSRP, QoS).
- Plan, implement, and manage Cisco SD-WAN solutions (vManage, vSmart, vBond) for secure and scalable WAN connectivity.
- Operate and maintain Cisco DNA Center (DNAC) for network automation, assurance, telemetry, and Software-Defined Access (SD-Access).
- Manage and troubleshoot Wireless LAN Controllers (WLCs) and associated Access Points (APs), ensuring optimal wireless performance.
- Administer and secure perimeter and internal network using Cisco ASA / Firepower NGFW (ACLs, NAT, VPN, IPS/IDS).
- Lead incident response, root cause analysis (RCA), and implement permanent corrective actions.
- Collaborate with security, cloud, and server teams for integrated IT infrastructure deployments.
- Create and maintain high-quality network documentation including topologies, IP schemas, and SOPs.
- Stay updated with the latest in Cisco technologies and recommend best practices for continuous improvement.
Preferred candidate profile
- Cisco Routing & Switching: Deep understanding and hands-on experience with Layer 2/3 protocols (VLANs, STP, HSRP, VRRP, OSPF, BGP, etc.)
- Cisco SD-WAN: Deployment, management, policy configuration, and monitoring via vManage.
- Cisco DNAC: Experience with automation templates, device provisioning, assurance, and analytics.
- Wireless Technologies: Strong experience with Cisco WLCs (e.g., 9800 series), RF tuning, SSID provisioning, and wireless security.
- Firewalls: Proficiency in Cisco Firepower / ASA with experience in NAT, site-tosite VPNs, remote access VPNs, and firewall rule management.
- Monitoring & Tools: Experience with SNMP, NetFlow, Syslog analysis, tools like SolarWinds, PRTG, or Cisco Prime Infrastructure.
- Familiarity with network segmentation, zero-trust principles, and network access control (NAC) solutions.
- Bachelors degree in Computer Science, Information Technology, or a related field.
- Mandatory Certifications: CCNP Enterprise or equivalent.
- Preferred Certifications: CCNP Security, Cisco SD-WAN Specialist, Cisco Certified DevNet Associate/Professional, or progress toward CCIE.