Description :

Job Summary :

We are seeking a highly skilled L2 Network Engineer with expert-level knowledge in Routing & Switching (OSPF, BGP, MPLS, VRF) and Deep expertise in Enterprise Firewalls (Palo Alto/Fortinet/Check Point). The ideal candidate will be responsible for network design (HLD/LLD), implementing advanced solutions including VXLAN, BGP EVPN, and SD-WAN, and providing L3 escalation support. Mandatory skills include network automation using Python and Ansible, managing the observability stack (SolarWinds/Nagios), and ensuring stringent security and compliance across the network infrastructure.

Key Responsibilities and Technical Deliverables :

A. Network Design & Architecture :

- Design and architect enterprise LAN/WAN, Data Center, and campus networks, ensuring scalability, security, and high availability.

- Create HLD/LLD (High-Level/Low-Level Design), network diagrams, and topology layouts along with comprehensive documentation.

- Perform Capacity planning, traffic engineering, and bandwidth optimization to support business growth and application performance.

- Evaluate new technologies like SD-WAN, ACI, VXLAN, EVPN, and appropriate automation tools for future deployment.

B. Implementation & Operations :

- Implement enterprise-grade routing & switching solutions utilizing expertise in protocols like OSPF, BGP, EIGRP, MPLS, VRF, STP, HSRP/VRRP, and EtherChannel.

- Deploy, configure, and maintain network devices including routers (Cisco/Juniper), switches, firewalls, WLC, load balancers, and VPN appliances.

- Data center networking : Implement Leaf-Spine architecture, VXLAN, and Fabric technologies (Cisco ACI/NSX experience is a strong advantage).

- Administer core network services : IP addressing, DNS, DHCP, NAC, AAA/RADIUS/TACACS+.

C. Security & Compliance :

- Configure and manage Enterprise Firewalls (Palo Alto / Fortinet / Check Point / Cisco Firepower), focusing on Deep expertise in NGFW features, IDS/IPS, and threat protection.

- Implement Web security, URL filtering, threat prevention, and SSL inspection policies.

- Manage and maintain site-to-site VPN, remote VPN, IPsec, and SSL VPN solutions.

- Participate in security audits, compliance checks (e.g., PCI, ISO), and vulnerability mitigation.

D. Escalation Management (L3 SME) :

- Act as L3 SME for complex and critical network incidents, providing expert-level troubleshooting and resolution across all network layers.

- Perform root cause analysis (RCA) and problem management to prevent recurring incidents.

- Mentor and guide L1/L2 teams, providing Knowledge Transfer (KT) sessions on advanced topics and troubleshooting techniques.

E. Monitoring & Performance Optimization :

- Monitor network performance, latency, and packet loss using tools like SolarWinds, Nagios, PRTG, or NetBrain.

- Implement proactive alerting, redundancy (HSRP/VRRP), high availability, and failover strategies to improve network resiliency and SLA adherence.

F. Automation & Scripting :

- Develop scripts for network automation using Python, Ansible, APIs, or Nornir.

- Automate configuration backups, compliance checks, and device provisioning using YAML, JSON, and network automation frameworks.

G. Documentation & Reporting :

- Maintain network configuration standards, SOPs, policies, and procedures.

- Prepare incident reports, detailed change management documentation, and RCA reports.

Required Technical Skills :

- Routing & Switching (Expert) : OSPF, BGP, MPLS, VRF, EIGRP, STP, VLANs, HSRP/VRRP, EtherChannel. Experience with Cisco, Juniper, Aruba, HPE, or equivalent platforms.

- Firewalls & Security (Deep Expertise) : Palo Alto / Fortinet / Check Point / Cisco Firepower. Strong understanding of NGFW features, IDS/IPS, threat protection.

- Data Center & Advanced Networking : VXLAN, BGP EVPN, Leaf-Spine architecture. Knowledge of Cisco ACI / NSX / SDN technologies.

- Wireless & WAN : SD-WAN solutions (Cisco Viptela, Fortinet, Aruba, Versa) and Wireless Controllers.

- Automation : Python, Ansible, YAML, JSON, REST APIs, and network automation frameworks.

- Monitoring & Ticketing : Tools like SolarWinds, PRTG, Nagios, and experience with ServiceNow, Remedy, or Jira (ITIL).

- Cloud Networking (Preferred) : Familiarity with AWS / Azure VNet, Transit Gateway, VPN, Direct Connect / ExpressRoute and cloud firewalls.

Soft Skills :

- Strong analytical and problem-solving capabilities.

- Excellent communication and leadership skills.

- Ability to work under pressure in high-severity situations.

- Collaborative attitude and mentoring ability.

- Strong documentation skills.