[LPS] Network Engineer

Key Responsibilities:

Network Design: Plan & design LAN/WLAN solutions tailored to business requirements, including performing RF site surveys and analyzing coverage. Develop and document network topologies, capacity plans, and migration strategies for requirements such as technology refresh. Implement and tune Wi-Fi networks (802.11 standards), optimize AP placement and coverage to ensure reliability. Software & Firmware Lifecycle Management: Plan, coordinate, and execute scheduled software and firmware upgrades for routers, switches, firewalls, and security appliances for the managed customer networks. Liaise with vendors, service delivery managers, and customer stakeholders to plan maintenance windows and minimize downtime. Maintain comprehensive asset and version control records to support audit, compliance, and lifecycle planning. Security Incident Response & Vulnerability Mitigation: Act as escalation point for network-related security incidents, coordinating with NOC teams and customer security contacts during investigations. Oversee the implementation of security patches, hotfixes, and vulnerability mitigations according to customer security policies and SLA timelines. Lead root cause analysis (RCA) activities and drive long-term remediation and security hardening initiatives. Network Inventory & Asset Management: Maintain an accurate and up-to-date inventory of all managed network assets-including routers, switches, UPS systems, and firewalls-across multiple customer sites. Ensure full lifecycle documentation, including installation records, warranty details, maintenance logs, and asset conditions. Conduct regular audits to verify asset accuracy and support capacity planning and refresh cycles. IP Address & Network Resource Management: Oversee enterprise-level IP Address Management (IPAM) across managed customer networks, ensuring optimal allocation, capacity planning, and compliance with customer standards. Maintain accurate IP address documentation, subnet inventory, and reservation policies to prevent conflicts and improve operational efficiency. Incident Support, Escalation & Troubleshooting: Provide L2 technical leadership for complex network incidents, ensuring rapid response and coordinated resolution across internal teams, service providers, and customer agencies. Lead diagnostic efforts to identify root causes of performance issues or connectivity disruptions. Ensure updates, documentation, and incident reports meet SLA requirements and service governance standards. Proactive Monitoring & Daily Health Checks: Oversee daily operational health checks and proactive monitoring of customer network infrastructure, ensuring early detection of anomalies. Review network performance trends, capacity utilization, and alert patterns to prevent service degradation. Provide daily or weekly health summaries to service delivery teams and customer stakeholders. Facility Power & Data Centre Operations Support: Lead coordination of facility power shutdown/recovery activities, ensuring network continuity and controlled failover during customer data center maintenance. Maintain and update power recovery runbooks, ensuring alignment with customer business continuity and resilience requirements. Standby and Onsite Support: Provide standby and onsite support for operational activities including power shutdowns, routine patching, security remediations, and other scheduled or emergency maintenance activities. Ensure availability and responsiveness during critical operational windows in accordance with customer SLA requirements. Documentation, SOPs & Knowledge Management: Own and maintain customer-specific documentation, including network diagrams, LLDs/HLDs, SOPs, runbooks, and configuration repositories. Ensure documentation remains audit-ready, version-controlled, and aligned with managed service operating procedures. Mentor junior engineers in documentation standards and operational best practices. Network System Account Review & Access Governance: Conduct periodic reviews of network system accounts, validating user access, privilege levels, and compliance with least-privilege principles. Monitor privileged account activity and investigate suspicious or unauthorized access attempts, coordinating with security teams as needed. Ensure regular updates of user roles and permissions based on customer organization changes. Log Management & Event Monitoring: Ensure all network and security devices are integrated with customer SIEM/log repositories in accordance with monitoring and compliance requirements. Review logs for anomalies, security alerts, or operational risks, coordinating with SOC and service delivery teams for further investigation. Configuration Backup & Disaster Recovery Readiness: Oversee automated configuration backups for all managed network devices and validate backup integrity and accessibility. Lead annual disaster recovery (DR) exercises for customer environments, ensuring RTO/RPO adherence and customer sign-off. Configuration Review, Hardening & Baseline Assurance: Conduct periodic configuration reviews to ensure compliance with customer standards, governance frameworks, and industry best practices. Lead firewall rule reviews to validate relevance, security alignment, and rule optimization. Maintain configuration baselines for routers, switches, firewalls, and IPS systems, identifying deviations and initiating corrective actions. Network and Security Deployment: Deployment of LAN/WLAN, Security solutions including Design, build, configure, test and provide required documentation and maintenance support for Deployment scope of Work. Firewall Management: Deploy, configure, manage, and maintain Palo Alto, Check Point and Fortigate firewalls to ensure network security. Onboard firewalls to their respective central management console. Analyze, implement and maintain firewall policies to control traffic and protect against threats. IPSEC configuration and understanding of IKE and Crypto map features. Switch Management: Configure, Deploy and manage Cisco(Catalyst and Nexus), Alcatel and Juniper switches, ensuring optimal performance and network segmentation. Has experience in analyzing and proving plan for Tech-refresh configuration of Switches. Troubleshoot and resolve LAN connectivity issues in the critical environment. Router Management: Configure, deploy and manage Cisco Routers, ensuring optimal performance and network routing standards are followed as per the design. Perform analysis and formulate plan for tech-refresh configuration of Routers. Troubleshoot and resolve WAN connectivity issues in the critical environment. IPSEC configuration and understanding of IKE and Crypto map features. Access Control and Authentication: Administer Aruba Clear Pass Policy Manager (CPPM) for user authentication and access control. Radius configuration, Certificate upgrade/revocation configuration. Ensure compliance with security policies and standards. Wireless Management: Deploy and configure the WLC on SSO and Flex connect and IAP or EWC concepts in Cisco wireless setup. AP management and RFID understanding. Implement and tune Wi-Fi networks (802.11 standards), optimize AP placement and coverage to ensure reliability. Troubleshoot and resolve WLAN Connectivity issues in the critical environment. Load Balancer Management: Able to deploy a new F5 LTM and setup a SSL Proxy configuration, VIP configuration and iRule configuration. Security Compliance: Ensure that network configurations and policies comply with industry best practices and security standards.

Qualifications:

• Bachelor's degree in information technology, Computer Science, or a related field.
• Minimum 8 years of experience in handling Network and Security Domain
• Minimum Cisco Certified Network Professional CCNP is required.
• PCNSE or CCSE equivalent certification is value added.
• Proven experience in managing Palo Alto, Check Point and Fortigate firewalls.
• Proficiency in configuring and troubleshooting Cisco or equivalent switches and Routers.
• Hands-on experience with Aruba Clear Pass Policy Manager (CPPM) or similar access control systems.
• Proficient in OSPF and BGP configuration.
• Strong knowledge of network protocols, routing, and switching, and Wi-Fi standards (802.11 a/b/g/n/ac/ax)
• Excellent problem-solving and analytical skills.
• Excellent skillset on Network Analysis and Migration planning to handle Network projects
• Effective communication and teamwork abilities.

Preferred Skills:

• Familiarity with network monitoring and management tools.
• ITIL Foundation certification or higher is preferred.
• Experience in Advanced Network on Network Automation and ACI Infrastructure deployment.
• Experience in Hybrid Network transition from on-premises networks to cloud.