LAN WAN Engineers

Job Description

***Multiple openings for Network Engineers*** Role:- Lan Design Engineer Experience Range:- 8 Years - 10 Years Location:- Banglore/chennai/Hyderabad Required Technical Skill Set (Skill Name) Network Design, Nexus ACI , Multicast Cisco ACI Cisco Routers, Switches and Cisco/F5 Load balancers and Cisco/Checkpoint/Palo-Alto firewalls, including both configuration design & implementation on customer-facing devices. Desired Competencies (Technical/Behavioral Competency) Must-Have 1. Ownership of Network Design within infrastructure delivery projects. Work with stakeholders to gather and validate technical requirements and ensure resilience, support and operability requirements are included 2. Significant experience in a design role in a complex network infrastructure 3. Experience in end to end troubleshooting of network issues. 4. Cisco ACI Experience 5. Network configurations using VXLAN, BGP, IPSec VPN, NAT, hybrid cloud/data centre, service provider connections Good-to-Have 1. Python programming, Jinja2 templates, Ansible playbooks 2. Exerience of CI/CD deployment pipelines for network infrastructure - GIThub/Ansible 3. Knowledge of Firewalls ( Checkpoint, Palo Alto, ASA), F5 load balancers, ASM, Network Visibility, Packet Aggregators, Data flow analysis, DNS, IPAM Role descriptions / Expectations from the Role The Engineer's role is to provide high quality design and implementation services to all areas in data centers, by ensuring that all networking infrastructure satisfies the requirements of given application environment and conforms to all applicable standards. This will involve working on project tasks throughout the datacenter networks per approved change window and architectural guidelines. The engineer will work on various network hardware/software but biased towards Cisco Routers, Switches and Cisco/F5 Load balancers and Cisco/Checkpoint/Palo-Alto firewalls, including both configuration design & implementation on customer-facing devices. The engineer is required to update/maintain all documentation requested by management and will be tasked with improving such documentation as required. Documentation & reporting Raise Network Change using the approved tool and follow up with Change Management Team for approvals Manage end to end change activity and update the stake holders about the status. ---------------------------------------------------------------------------------------------------------------------------------------------------------- Role:- LAN Implementation Engineer/WAN Design Engineer/LAN WAN Implementation Engineer Experience Range:- 8 Years - 10 Years Location:- Banglore/chennai/Hyderabad Required Technical Skill Set (Skill Name) Checkpoint Firewall Palo Alto Firewall, Cisco ASA Firewall Fortigate Cisco Data Network Nexus 7k, EIGRP Azure Cloud -ExpressRoute, VNET Configuration Desired Competencies (Technical/Behavioral Competency) Must-Have Subject Matter Expert (SME)- Security engineer to perform obsolete hardware replacements, code upgrades, and configuration compatibility validation for both physical and virtual appliances. The role includes expertise in multi-context firewalls, IDS/IPS configurations, DDOS (Arbor) solutions, conducting pre- and post- validation testing, and ensuring operational stability in critical production environments. Engineer must have expertise in Cisco Firewalls/Palo Alto/FortiGate/ Check points and IDS/IPS & DDOS (Arbor). Good-to-Have Minimum 2 mandate details are mandate with two or 3 liners 1. Check Point certification (CCSA) / PaloAlto Certification (PCNSE) 2. Azure Cloud Certification 3. CCNP Network Certification Role descriptions / Expectations from the Role Expertise in upgrading and managing code, image, firmware, bootstrap programs, software and security patches for network security devices like Firewalls/IDS/IPS (Cisco/Palo Alto/Juniper/Forti Gate/Check points), DDOS (Arbor) deployed in on-premises, remote and third-party data centers. Demonstrated ability to replace obsolete hardware and virtual appliances through detailed planning, including pre-upgrade checks, backup strategies, testing procedures, and rollback plans for both physical and virtual components. Risk assessment and execution, ensuring compatibility and performance in production environments. Firewalls & IDS/IPS: Plan and implement the lifecycle replacement of end-of-support (EOS) and end-of-life (EOL) security appliance, optimizing infrastructure resilience. Analyze configuration compatibility between old and new firmware versions or hardware models, identifying and resolving conflicts to ensure seamless transition. Migrate and validate configurations, including NAT policies, VPN tunnels, IDS/IPS rules and muti-context setups, to new hardware or virtual appliances. Conduct rigorous pre-upgrade and post-upgrade testing, including failover scenarios and security rule verification, to ensure operational stability and policy consistency. DDOS Protection (Arbor Networks): Proficient in upgrading and replacing DDOS mitigation hardware and virtual appliances, such as Arbor Edge Defense (AED). Ability to analyze network flow, configure threshold policies, and test mitigation strategies to ensure uninterrupted services. Skilled in integrating DDOS Protection with upstream and downstream devices during replacement/ upgrades. Capability to implement and validate the configurations, Security policies and Application policies post-upgrade. Documentation and compliance - Define lifecycle management strategies for hardware and software. Maintain comprehensive documentation of upgrade activities, including change management logs and compliance reports. Ensure adherence to organizational security standards, change processes and industry best practices throughout the upgrade process. Good to Have: Knowledge on ansible/python (For automation and troubleshooting), cloud-native networking services and tools (AWS, AZURE).