Description
Job Summary :
We are seeking a highly skilled L2 Network Engineer with expert-level knowledge in Routing & Switching (OSPF, BGP, MPLS, VRF) and Deep expertise in Enterprise Firewalls (Palo Alto/Fortinet/Check Point). The ideal candidate will be responsible for network design (HLD/LLD), implementing advanced solutions including VXLAN, BGP EVPN, and SD-WAN, and providing L3 escalation support. Mandatory skills include network automation using Python and Ansible, managing the observability stack (SolarWinds/Nagios), and ensuring stringent security and compliance across the network infrastructure.
Key Responsibilities And Technical Deliverables
- Network Design & Architecture :
- Design and architect enterprise LAN/WAN, Data Center, and campus networks, ensuring scalability, security, and high availability.
- Create HLD/LLD (High-Level/Low-Level Design), network diagrams, and topology layouts along with comprehensive documentation.
- Perform Capacity planning, traffic engineering, and bandwidth optimization to support business growth and application performance.
- Evaluate new technologies like SD-WAN, ACI, VXLAN, EVPN, and appropriate automation tools for future deployment.
- Implementation & Operations :
- Implement enterprise-grade routing & switching solutions utilizing expertise in protocols like OSPF, BGP, EIGRP, MPLS, VRF, STP, HSRP/VRRP, and EtherChannel.
- Deploy, configure, and maintain network devices including routers (Cisco/Juniper), switches, firewalls, WLC, load balancers, and VPN appliances.
- Data center networking : Implement Leaf-Spine architecture, VXLAN, and Fabric technologies (Cisco ACI/NSX experience is a strong advantage).
- Administer core network services : IP addressing, DNS, DHCP, NAC, AAA/RADIUS/TACACS+.
- Security & Compliance :
- Configure and manage Enterprise Firewalls (Palo Alto / Fortinet / Check Point / Cisco Firepower), focusing on Deep expertise in NGFW features, IDS/IPS, and threat protection.
- Implement Web security, URL filtering, threat prevention, and SSL inspection policies.
- Manage and maintain site-to-site VPN, remote VPN, IPsec, and SSL VPN solutions.
- Participate in security audits, compliance checks (e.g., PCI, ISO), and vulnerability mitigation.
- Escalation Management (L3 SME) :
- Act as L3 SME for complex and critical network incidents, providing expert-level troubleshooting and resolution across all network layers.
- Perform root cause analysis (RCA) and problem management to prevent recurring incidents.
- Mentor and guide L1/L2 teams, providing Knowledge Transfer (KT) sessions on advanced topics and troubleshooting techniques.
- Monitoring & Performance Optimization :
- Monitor network performance, latency, and packet loss using tools like SolarWinds, Nagios, PRTG, or NetBrain.
- Implement proactive alerting, redundancy (HSRP/VRRP), high availability, and failover strategies to improve network resiliency and SLA adherence.
- Automation & Scripting :
- Develop scripts for network automation using Python, Ansible, APIs, or Nornir.
- Automate configuration backups, compliance checks, and device provisioning using YAML, JSON, and network automation frameworks.
- Documentation & Reporting :
- Maintain network configuration standards, SOPs, policies, and procedures.
- Prepare incident reports, detailed change management documentation, and RCA reports.
Required Technical Skills
- Routing & Switching (Expert) : OSPF, BGP, MPLS, VRF, EIGRP, STP, VLANs, HSRP/VRRP, EtherChannel. Experience with Cisco, Juniper, Aruba, HPE, or equivalent platforms.
- Firewalls & Security (Deep Expertise) : Palo Alto / Fortinet / Check Point / Cisco Firepower. Strong understanding of NGFW features, IDS/IPS, threat protection.
- Data Center & Advanced Networking : VXLAN, BGP EVPN, Leaf-Spine architecture. Knowledge of Cisco ACI / NSX / SDN technologies.
- Wireless & WAN : SD-WAN solutions (Cisco Viptela, Fortinet, Aruba, Versa) and Wireless Controllers.
- Automation : Python, Ansible, YAML, JSON, REST APIs, and network automation frameworks.
- Monitoring & Ticketing : Tools like SolarWinds, PRTG, Nagios, and experience with ServiceNow, Remedy, or Jira (ITIL).
- Cloud Networking (Preferred) : Familiarity with AWS / Azure VNet, Transit Gateway, VPN, Direct Connect / ExpressRoute and cloud firewalls.
Soft Skills
- Strong analytical and problem-solving capabilities.
- Excellent communication and leadership skills.
- Ability to work under pressure in high-severity situations.
- Collaborative attitude and mentoring ability.
- Strong documentation skills.
(ref:hirist.tech)
