Job
Description
The Networking Managed Services Engineer (L2) may also contribute to support on project work as and when required. What you'll be doing Key Responsibilities: Monitoring, technical and troubleshooting support and administration of firewall (FortiGate SD WAN) Ensure daily backup of Management servers and firewall. Troubleshooting access related issues due to firewall and IPS policies Prepare daily/weekly/monthly/half yearly/yearly compliance as per HSL requirement. Review monitoring alerts for the firewall for availability and performance using in-house deployed NMS tool Configure firewall/IPS/AV security policies on firewall. Modification/deletion/addition of rules/routes/policies as per requirements from HSL Provide audit evidence as and when required Assist OEM/HSL Project team in product upgrade/maintenance activities. Log analysis and reporting using native tool. Capacity management Incident management UAM and Firewall rule base review Change management process need to be followed. Service window for this engagement is 16/6 (two shifts) In absence of onsite resource, there should be an immediate replacement of the resource. Provision and configure FortiGate devices for SD-WAN functionality, including defining WAN links, VPN tunnels, and traffic shaping policies. Deploy and manage SD-WAN overlays to optimize network performance and reliability. Define and enforce traffic policies based on application types, quality of service (QoS) requirements, and security policies. Implement dynamic path selection and traffic steering rules to ensure efficient utilization of WAN links. Monitor the performance and health of SD-WAN links and devices using Fortinet management tools. Troubleshoot network connectivity issues, latency, and packet loss problems in the SD-WAN environment. Analyze traffic patterns and utilization statistics to identify potential bottlenecks and optimize network performance. Integrate security features such as firewall, intrusion prevention system (IPS), and web filtering with SD-WAN policies to ensure secure access to applications and data. Configure security policies to inspect and filter traffic at the WAN edge to protect against threats and vulnerabilities. Configure QoS policies to prioritize critical applications and traffic types over less important ones. Implement traffic shaping and bandwidth management techniques to ensure optimal performance for real-time applications like voice and video conferencing. Monitor network utilization and capacity trends to forecast future bandwidth requirements. Scale SD-WAN infrastructure to accommodate growing traffic demands and business needs. Maintain up-to-date documentation of SD-WAN configurations, policies, and procedures. Generate regular reports on network performance, uptime, and security events for management and compliance purposes. Implement changes to SD-WAN configurations following best practices and change management procedures. Coordinate with other IT teams to ensure seamless integration of SD-WAN changes with existing network infrastructure. End user support if any issue due to firewall policies. Support for DC/DR headend device for change management, daily operation,HW/SW upgrade, modification, maintenance activity and incident. Upgrade activity (hardware/software) need to be performed as per OEM recommendation for headend and branch devices. Closing of audit and VA points for headend and branch devices Support for existing inventory of fortigate appliances (Firewall, controller, AP, Analyzer) across DC,DR and branches. Coordinating and raise the case with ISP (MPLS/P2P/Internet) for link down/link flapping/high latency issue (Branch link and their hub DC/DR link) Coordinating with ISP for link configuration in the event of new link commissioning, link shifting, link bandwidth upgrade, change of service provider. (Branch link and their hub DC/DR link) Configuration of links on BGP/EIGRP/IGP and OSPF protocols Preparation of daily/monthly/quarterly link utilization report and publish to seniors Follow the change management process and generate the change ID before execution of any change Academic Qualifications and Certifications: Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience). Fortinet SDWAN certification or equivalent certification. Certifications relevant to the services provided (certifications carry additional weightage on a candidates qualification for the role).
