Staff Network Engineer

Candidate should have good knowledge in design, implement, configures and support local area networks (LAN) and wide area networks (WAN) as well as Voice over IP (VoIP). Maintains all systems, applications, network configurations as well as ensuring network availability to all system users. Troubleshoots, isolate and resolve network performance issues. Researches recommends and performs upgrades, patches, as well as implementing new applications and equipment.

Responsibilities:

• Should have good experience in Cisco Routers, Switches, Firewalls & Nexus platforms
• Configuration and Operational support experience with Nexus switches, NSX-T/NSX-V, NSX Edge, NSX logical router, NSX Load balancer, NSX distributed Firewall
• Configuring, troubleshooting and managing Routing protocols, Firewall Security policies/rules, Cisco ISE RBAC policy, service definitions, Load balancing rules - creating virtual server, Pool configuration, iRules, SSL client-server configuration, redirection rules, etc.
• Deployment of SD WAN setup physical and virtual on sites and integration with Azure
• Implementing and managing Azure connectivity and networking (e.g., Express Route, DNS, IP allocation and traffic routing, NSG’s and Azure Firewall, etc.)
• Azure VNET and subnet management, troubleshooting and provision via Terraform or Azure PowerShell
• Identify root cause of problem
• Identify hardware problems through log investigation
• Report and investigate anomalies outside the expected norm.
• Understanding of IPS/IDS technologies
• Monitoring the Network Availability and Performance.
• Review all critical links for utilisation and error thresholds
• Review all configurations and compare to standards document and NAS config policy
• Installs, configures, maintains and manages network security systems including, access controls, firewalls, and other network security products.
• Proxy ticket opening with carrier or vendor as required
• Open trouble tickets, follow-up, repair as required
• Follow up on open issues, update tickets periodically & closing it within SLA Review of Syslog status Documentation.
• Respond to system issues related to the infrastructure and fulfill service requests
• Prioritize workload and resolve any technical issues/roadblocks
• Solid skills in logical troubleshooting, communication, documentation and problem resolution
• Maintain a positive attitude and positive working relationship with all departments.

Qualifications:

• Bachelor’s degree in computer science, MIS or engineering related field or equivalent work experience
• 5-8+ years of combined related work experience
• Good to have: CCNA, CCNP, any public cloud certification
• Nice to have: Knowledge on load balancer, very good understanding on Public cloud IaaS - Azure / AWS / GCP, SDWAN
• Experience in Enterprise VOIP and Telephone system maintenance and management.
• Proven knowledge in Cloud, Virtualization and Network Security.
• Strong experience on Routing/Switching, Firewall, Content Filtering, Radius, Routing protocols (EIGRP, OSPF, BGP), Wireless, VPN, WAAS
• Willing to work under different technologies and take up new technology responsibilities outside the core skills
• Ability to interact with various levels of professionals
• Ability to work under pressure in a fast-paced environment and meet tight deadlines
• Ability to act independently to drive IT goals and changes
• Advanced troubleshooting methodology
• Ability to judge priorities and adjust their work accordingly

Preferred Skills:

• Experience with implementing and managing Cloud Environments (Public, Private, Hybrid Cloud)
• Applicable experience with firewalls, Internet VPN’s remote implementation, troubleshooting, and problem resolution.
• Familiarity with monitoring and analysis solutions such as SolarWinds, NetMon.
• Proficiency in designing and implementing load balancing solutions
• Good knowledge on observability tools like Datadog.
• NSX - Network and Security Virtualization

• Extensive hands-on experience and troubleshooting experience in Network Protocols - BGP, OSPF, MPLS, IS-IS, STP, ECMP, vPC, etc.

• Firewall Technologies like Palo Alto, cisco ASA
• Experience in network security components, such as ISE, IDS, IPS, WAF.
• Authentication: Cisco ISE, TACACS+, LDAP/Radius Server, Cisco ACS server,
• Experience implementing NSX for Network micro-segmentation in a large enterprise
• implementation experience of Palo Alto SD-WAN.
• Agile development methods Experi…