Network Administrator - Routing & Switching

Description :

Role : Network Administrator

Experience : 8+ Years

Work Location : Bangalore / Pune (Work from Office)

Role Type : Permanent Full-Time

Role Summary :

We are seeking a seasoned Network Administrator with over 8 years of specialized experience in Fortinet and Cisco technologies to lead the implementation and operation of our global enterprise infrastructure.

This role is critical in ensuring high-availability connectivity across Woodbridge locations, focusing on the seamless integration of SD-WAN, Zero Trust Network Access (ZTNA), and secure cloud-hybrid environments.

You will serve as the Tier-3 escalation point for complex infrastructure issues, driving performance optimization and strict regulatory compliance.

The ideal candidate must be an expert in multi-vendor orchestration, capable of managing sophisticated firewall policies alongside advanced Cisco routing and switching architectures.

Technical Responsibilities :

- Advanced Fortinet Firewall Orchestration : Design and manage enterprise-grade Fortinet solutions, including High Availability (HA) cluster configuration, advanced VDOM management, and complex firewall policy auditing.

- Endpoint Security and Analytics : Administer FortiClient EMS and FortiAnalyzer to manage endpoint security postures, generate deep-dive forensic analytics, and ensure global compliance reporting.

- Complex Cisco Routing and Switching : Configure and troubleshoot Cisco hardware using advanced protocols including BGP, OSPF, and EIGRP, while managing VLAN trunking, Spanning Tree Protocol (STP), and Layer 3 sub-interfaces.

- Identity Services and Automation : Oversee Cisco ISE (Identity Services Engine) for NAC and policy enforcement, and utilize Cisco DNA Center for network automation, assurance, and site-wide deployments.

- Global SD-WAN Integration : Lead the deployment of cross-functional SD-WAN solutions, integrating Fortinet security overlays with Cisco underlay networking for optimized application steering and WAN resilience.

- Wireless Infrastructure Management : Manage Cisco Wireless LAN Controllers (WLC) and high-density Access Point (AP) deployments, ensuring seamless roaming, RF optimization, and secure guest access.

- Security & Threat Mitigation : Implement and tune advanced security features including Intrusion Detection/Prevention Systems (IDS/IPS), content filtering, and SSL inspection to mitigate emerging cyber threats.

- Network Segmentation and ZTNA : Architect secure network zones using micro-segmentation and Zero Trust Network Access (ZTNA) principles to minimize the internal attack surface.

- Tier-3 Troubleshooting and RCA : Provide expert-level support for complex connectivity issues involving MPLS failover, Site-to-Site VPN tunnels, and performance bottlenecks in the global backbone.

- Capacity Planning and DR Testing : Conduct regular network utilization reviews and lead Disaster Recovery (DR) drills to ensure the resilience of mission-critical voice and data services.

- Infrastructure Strategy and Mentorship : Contribute to the long-term IT infrastructure roadmap and mentor junior engineers on advanced networking concepts and Woodbridge-specific standards.

- Vendor and Procurement Management : Interface with global vendors for hardware procurement, license renewals, and technical support escalation for both Fortinet and Cisco platforms.

Required Technical Skills :

- Firewall Security : Expert-level mastery of FortiOS, FortiClient EMS, and FortiManager.

- Core Networking : Deep proficiency in Cisco IOS/IOS-XE, BGP, OSPF, and advanced Layer 2/3 switching.

- Network Access Control : Hands-on experience with Cisco ISE for device profiling and 802.1X authentication.

- WAN Technologies : Proven experience in managing Global SD-WAN, MPLS, and High-Speed Internet Circuits.

- Wireless Architecture : Expertise in managing centralized Cisco WLC and associated Access Point ecosystems.

- Monitoring & Documentation : Proficiency in using SNMP-based monitoring tools and maintaining rigorous documentation via Visio or NetBox.

Preferred Technical Skills :

- Network Automation : Proficiency in Python or Ansible for automating repetitive configuration tasks and infrastructure auditing.

- Telephony & VoIP : Familiarity with Cisco Unified Communications Manager (CUCM) or cloud-based voice infrastructure.

- Cloud Integration : Experience in extending on-premise networks to AWS (Transit Gateway/Direct Connect) or Azure (ExpressRoute/Virtual WAN).

- Certifications : Active CCNP/CCIE (Security or Enterprise) and Fortinet NSE 4-7 are highly preferred.

- ITIL Mastery : Strong understanding of ITIL Change Management and Incident Management workflows.

- Packet Analysis : Expert level skill in using Wireshark for deep-packet inspection and protocol-level troubleshooting.

Technical Stack :

- Hardware : Cisco Catalyst Switches, ISR/ASR Routers, FortiGate Firewalls (60F to 1000F series).

- Software : FortiOS, Cisco DNA Center, FortiAnalyzer, FortiClient EMS.

- Management : Cisco ISE, WLC, SolarWinds, PRTG.

- Protocols : BGP, OSPF, IPsec, GRE, 802.1Q, 802.1X.