Network Engineer

We are hiring for a Network Engineer at the Bangalore location

Role purpose :

We are looking for a hands-on network engineer to run and support enterprise wireless, perimeter security, and routing for our customers. This is a working engineering role rather than a coordination one: you will configure the devices yourself, own incidents through to resolution, and produce the documentation that goes back to the customer.

The successful candidate will be comfortable moving between a FortiGate policy, a Juniper SRX zone, a Cisco routing table and a wireless controller in the same day, and will be able to explain to a customer what changed and why.

Key responsibilities

Wireless

• Configure, operate and troubleshoot enterprise WLAN controllers, access points, SSID-to-VLAN mapping, and AP provisioning.
• Implement secure wireless authentication using WPA2/WPA3-Enterprise with 802.1X and RADIUS, and support certificate and guest access methods.
• Carry out RF planning and validation, site surveys, channel and power planning, coverage and interference checks.
• Diagnose client-side problems: association and authentication failures, roaming, sticky clients, band steering and throughput complaints.

Firewall and security

• Build and maintain firewall policies, NAT rules and object groups on Fortinet FortiGate, Juniper SRX and Cisco ASA or Firepower.
• Configure and support IPSec site-to-site and SSL/remote-access VPN, including troubleshooting phase 1 and phase 2 negotiation.
• Operate security profiles application control, web filtering, IPS and antivirus and tune them to reduce false positives.
• Support firewall high availability pairs, firmware upgrades and rule-base reviews and clean-ups.

Routing and switching

• Configure and troubleshoot routing on Cisco IOS/IOS-XE and Juniper Junos static routing, OSPF and basic BGP.
• Support the switched estate: VLANs, trunking, spanning tree, link aggregation and port channels.
• Work with WAN and internet links, including failover, routing policy and ISP coordination.

Operations and delivery :

• Respond to incidents within agreed service levels, perform root cause analysis and close the loop with the customer.
• Raise and execute changes through the change process, including rollback plans and post-change validation.
• Monitor the estate using SNMP, syslog and NMS tooling; investigate using packet captures where needed.
• Produce and maintain configuration documents, as-built records, network diagrams and standard operating procedures.
• Take part in the on-call rota and attend customer sites in and around Bangalore when hands-on work is required.

Essential skills and experience

Experience :

3 to 4 years in enterprise networking, with genuine hands-on configuration and troubleshooting rather than monitoring only.

Wireless :

Working experience with at least one enterprise WLAN platform Cisco (WLC / Catalyst 9800), Aruba, Ruckus or equivalent covering controller and AP configuration, 802.1X and RF troubleshooting.

Firewalls :

Hands-on with at least two of Fortinet FortiGate, Juniper SRX and Cisco ASA / Firepower. Comfortable working at CLI, not only through the GUI.

Routing:

Practical routing and switching on Cisco IOS/IOS-XE or Juniper Junos: static routing, OSPF, VLANs, trunking, spanning tree and link aggregation.

VPN :

Configuration and troubleshooting of IPSec and SSL VPN.

Troubleshooting:

Structured fault isolation, log analysis and packet capture using Wireshark or an equivalent tool.

Documentation :

Able to write clear configuration records, change plans and diagrams that a colleague can follow.

Communication:

Able to explain a technical issue to a non-technical customer contact, in English and ideally in Hindi or Kannada.

Desirable :

• Certification in one or more of: CCNA or CCNP Enterprise / Security, Fortinet NSE 4 or above, JNCIA or JNCIS.
• Exposure to SD-WAN, particularly FortiGate SD-WAN or Cisco Viptela.
• Experience with network access control, RADIUS or Cisco ISE.
• Familiarity with data centre switching, and with structured cabling and rack work.
• Scripting for routine tasks Python, Ansible or similar.
• Experience working to ITIL-style incident, change and problem processes.

Qualifications :

Bachelors degree in Engineering, Computer Science, Information Technology or a related discipline.

Candidates with a diploma and strong demonstrable hands-on experience will also be considered.