Senior Network Engineer
Summary
Design, deploy, and secure enterprise networks and firewalls for clients, handling LAN/WLAN, routing, switching, and 24x7 incident response with multi-vendor environments.
We are seeking an experienced and proactive Network Engineer to design, deploy, secure, and maintain complex enterprise network and security infrastructures. In this role, you will lead end-to-end network operations—from LAN/WLAN architecture and firewall management to advanced routing, security hardening, and 24x7 incident support. You will serve as a technical escalation point, ensuring high availability, compliance, and seamless operational performance across multi-vendor customer environments.
Key Responsibilities:
1. Network Design & Architecture
LAN/WLAN Solutions: Plan, design, and implement enterprise LAN and wireless networks (802.11 standards), including conducting RF site surveys, coverage analysis, and optimizing Access Point (AP) placement.
Documentation & Topology: Develop and maintain network topologies, high-level/low-level designs (HLDs/LLDs), capacity plans, and migration strategies for technology refresh cycles.
2. Core Infrastructure & Device Management
Routing & Switching: Configure, deploy, and manage multi-vendor switches (Cisco Catalyst/Nexus, Alcatel, Juniper) and routers. Formulate tech-refresh configurations and resolve critical WAN/LAN connectivity issues.
Firewall & Security Management: Deploy and manage Palo Alto, Check Point, and Fortigate firewalls. Onboard devices to central management consoles, enforce security policies, configure IPSEC (IKE/Crypto maps), and maintain configuration baselines.
Wireless & Access Control: Manage Wireless LAN Controllers (WLC) with SSO, FlexConnect, and IAP/EWC concepts. Administer Aruba ClearPass Policy Manager (CPPM) for RADIUS authentication, certificates, and access control.
Load Balancers: Deploy and configure F5 Local Traffic Managers (LTM), setting up SSL proxies, Virtual IPs (VIPs), and iRules.
3. Lifecycle & Asset Management
Software & Firmware Upgrades: Plan, coordinate, and execute scheduled upgrades for routers, switches, firewalls, and security appliances, minimizing downtime through managed maintenance windows.
Asset Tracking & Inventory: Maintain an accurate inventory of all network assets (including UPS systems) across customer sites, ensuring complete lifecycle documentation (installation, warranties, and maintenance logs).
IPAM & Resources: Oversee enterprise-level IP Address Management (IPAM), subnet inventories, and reservation policies to prevent conflicts.
4. Security, Compliance & Incident Response
Incident Support (L2/L3): Provide technical leadership for complex network incidents, driving root cause analysis (RCA) and ensuring strict SLA compliance.
Vulnerability Mitigation & Hardening: Oversee the implementation of security patches, hotfixes, and CIS-aligned hardening baselines. Conduct periodic configuration and firewall rule reviews.
Access Governance & SIEM: Perform periodic network account reviews, monitor privileged access, ensure SIEM log integration, and oversee automated configuration backups and disaster recovery (DR) exercises.
5. Operations & Facility Support
Monitoring & Health Checks: Oversee daily operational health checks, traffic trends, and proactive monitoring to detect anomalies early.
Facility Power Operations: Coordinate data center power shutdown and recovery activities, maintaining robust power recovery runbooks for business continuity.
Requirements:
- Bachelor’s degree in information technology, Computer Science, or a related field.
- Minimum 8 years of experience in handling Network and Security Domain
- Minimum Cisco Certified Network Professional CCNP is required.
- PCNSE or CCSE equivalent certification is value added.
- Proven experience in managing Palo Alto, Check Point and Fortigate firewalls.
- Proficiency in configuring and troubleshooting Cisco or equivalent switches and Routers.
- Hands-on experience with Aruba Clear Pass Policy Manager (CPPM) or similar access control systems.
- Proficient in OSPF and BGP configuration.
- Strong knowledge of network protocols, routing, and switching, and Wi-Fi standards (802.11 a/b/g/n/ac/ax)
- Excellent problem-solving and analytical skills.
- Excellent skillset on Network Analysis and Migration planning to handle Network projects
- Effective communication and teamwork abilities.
Preferred Skills:
- Familiarity with network monitoring and management tools.
- ITIL Foundation certification or higher is preferred.
- Experience in Advanced Network on Network Automation and ACI Infrastructure deployment.
- Experience in Hybrid Network transition from on-premises networks to cloud.