Network Engineer (Immediate joiners)

EXP - 5-7 yrs

Immediate joiners only

Description

Key Responsibilities

• Design, implement, and optimize FortiGatebased SDWAN (business intent overlays, SLA policies, application steering, local breakout).
• Engineer and maintain Firewall security: zones, objects, policies, NAT (central NAT), UTM profiles, SSL inspection, IPS/DoS policies, logging.
• Plan and deploy sitetosite VPNs (route/policybased), IPsec HA, and hubandspoke topologies alongside Internet/MPLS underlays.
• Lead campus switching design: STP/RSTP/MST, VLANs, link aggregation (LACP/EtherChannel), access control, QoS marking, storm control.
• Build L3 segmentation (VRFs), interVLAN routing, and eastwest policies across access/distribution with clear zone models.
• Implement high availability: FortiGate AP/AA clusters, dualhomed uplinks, firsthop redundancy (VRRP/HSRP/GLBP as applicable).
• Create and maintain network documentation: HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
• Establish monitoring & telemetry: SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
• Drive capacity planning, performance tuning, and proactive lifecycle management (firmware, images, templates).
• Collaborate with security, apps, and infra teams for change planning, DR/BCP, and audit/compliance requirements.
• Contribute to automation (nicetohave): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
• Provide Tier3/4 escalation support and participate in oncall as needed.

Responsibilities

Key Responsibilities

• Design, implement, and optimize FortiGatebased SDWAN (business intent overlays, SLA policies, application steering, local breakout).
• Engineer and maintain Firewall security: zones, objects, policies, NAT (central NAT), UTM profiles, SSL inspection, IPS/DoS policies, logging.
• Plan and deploy sitetosite VPNs (route/policybased), IPsec HA, and hubandspoke topologies alongside Internet/MPLS underlays.
• Lead campus switching design: STP/RSTP/MST, VLANs, link aggregation (LACP/EtherChannel), access control, QoS marking, storm control.
• Build L3 segmentation (VRFs), interVLAN routing, and eastwest policies across access/distribution with clear zone models.
• Implement high availability: FortiGate AP/AA clusters, dualhomed uplinks, firsthop redundancy (VRRP/HSRP/GLBP as applicable).
• Create and maintain network documentation: HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
• Establish monitoring & telemetry: SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
• Drive capacity planning, performance tuning, and proactive lifecycle management (firmware, images, templates).
• Collaborate with security, apps, and infra teams for change planning, DR/BCP, and audit/compliance requirements.
• Contribute to automation (nicetohave): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
• Provide Tier3/4 escalation support and participate in oncall as needed.

Qualifications

Key Responsibilities

• Design, implement, and optimize FortiGatebased SDWAN (business intent overlays, SLA policies, application steering, local breakout).
• Engineer and maintain Firewall security: zones, objects, policies, NAT (central NAT), UTM profiles, SSL inspection, IPS/DoS policies, logging.
• Plan and deploy sitetosite VPNs (route/policybased), IPsec HA, and hubandspoke topologies alongside Internet/MPLS underlays.
• Lead campus switching design: STP/RSTP/MST, VLANs, link aggregation (LACP/EtherChannel), access control, QoS marking, storm control.
• Build L3 segmentation (VRFs), interVLAN routing, and eastwest policies across access/distribution with clear zone models.
• Implement high availability: FortiGate AP/AA clusters, dualhomed uplinks, firsthop redundancy (VRRP/HSRP/GLBP as applicable).
• Create and maintain network documentation: HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
• Establish monitoring & telemetry: SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
• Drive capacity planning, performance tuning, and proactive lifecycle management (firmware, images, templates).
• Collaborate with security, apps, and infra teams for change planning, DR/BCP, and audit/compliance requirements.
• Contribute to automation (nicetohave): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
• Provide Tier3/4 escalation support and participate in oncall as needed.