Senior Network Engineer

About the Role
We are hiring a highly technical Senior Network Engineer with strong experience in customer deployments (Greenfield and Brownfield environments). The ideal candidate should have prior experience in an OEM TAC environment (Cisco, Juniper, Fortinet) or at a high-end system integrator handling escalations and complex troubleshooting.

This role focuses on:
- Customer network deployments
- Production migrations
- Firewall and routing implementations
- Advanced routing design and troubleshooting
- Enterprise VPN architectures

The candidate must be a routing champion with deep protocol-level understanding and real-world implementation experience.

Primary Responsibilities

1. Customer Deployments (Primary Focus)

- Lead Greenfield network deployments.
- Execute Brownfield migrations with minimal downtime.
- Perform firewall cutovers and routing transitions.
- Design and implement secure WAN architectures.
- Participate in customer change windows aligned to U.S. hours.

2. Routing (Deep Expertise Required)

Strong hands-on implementation and troubleshooting experience with:

- BGP (iBGP, eBGP, route reflectors, route maps)
- OSPF (multi-area, LSA troubleshooting)
- Static routing & policy-based routing
- Redistribution strategies
- VRF segmentation
- MPLS fundamentals
- Route filtering and prefix lists

Must be able to debug routing issues from packet capture level.

3. Firewall & Security Platforms

Hands-on deployment and troubleshooting:

Fortinet (Strongly Preferred)

- Forti Gate deployment
- HA clustering
- IPSec VPN configuration
- SSL VPN
- Policy optimization
- NAT policies
- SD-WAN configuration

Cisco ASA

- ASA firewall configuration
- Site-to-site IPSec VPN
- Remote access VPN
- Any Connect deployment
- ACL and NAT troubleshooting

Experience with Juniper SRX or other enterprise firewalls is a plus.

4. VPN Technologies

- Site-to-site IPSec VPN
- Remote access VPN
- SSL VPN
- Policy-based and route-based VPNs
- Phase 1 / Phase 2 troubleshooting
- Encryption domain mismatches
- MTU/MSS tuning

5. Switching

- VLAN design
- Trunking (802.1Q)
- STP / RSTP troubleshooting
- Port-channel configuration
- L2/L3 switching concepts
- Inter-VLAN routing

6. Troubleshooting & TAC-Level Debugging

- Packet captures (Wireshark, tcpdump)
- Debug commands on Cisco/Fortinet
- Control-plane vs data-plane isolation
- CPU and memory troubleshooting
- Log analysis and RCA documentation

Experience working in OEM TAC (Cisco/Juniper/Fortinet) or handling escalated cases is highly desirable.

Required Technical Qualifications

- Minimum CCNP or Equivalent (Mandatory)
- 6+ years of enterprise networking experience
- Strong BGP implementation experience
- Hands-on Fortinet firewall deployments
- Cisco ASA configuration experience
- IPSec VPN troubleshooting expertise
- Experience in customer-facing roles

Preferred Qualifications

- CCNP Security or CCIE (Preferred but not mandatory)
- Fortinet NSE certification

- Experience with SD-WAN deployments
- Exposure to cloud networking (AWS/Azure)

Work Model Requirements

- Remote role within India.
- Mandatory alignment with U.S. EST time zone.
- Participation in production change windows.
- Customer interaction and deployment ownership required.

What We Are Looking For

- Routing-first mindset.
- Strong troubleshooting instincts.
- Confident in customer calls.
- Deployment ownership mentality.
- Clear documentation and RCA discipline.