Network Engineer
- Zensar
- 0 - 9 years
- Bengaluru
- 1 month ago
- Email to a friend
- Report this job
Job Description
Key Responsibilities
- Design, implement, and optimize FortiGate based SD WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security : zones, objects, policies, NAT (central NAT) , UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site to site VPNs (route/policy based), IPsec HA , and hub and spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST , VLANs, link aggregation ( LACP/EtherChannel ), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter VLAN routing, and east west policies across access/distribution with clear zone models.
- Implement high availability : FortiGate A P/A A clusters , dual homed uplinks, first hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation : HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry : SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning , and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP , and audit/compliance requirements.
- Contribute to automation (nice to have): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier 3/4 escalation support and participate in on call as needed.
Key Responsibilities
- Design, implement, and optimize FortiGate based SD WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security : zones, objects, policies, NAT (central NAT) , UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site to site VPNs (route/policy based), IPsec HA , and hub and spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST , VLANs, link aggregation ( LACP/EtherChannel ), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter VLAN routing, and east west policies across access/distribution with clear zone models.
- Implement high availability : FortiGate A P/A A clusters , dual homed uplinks, first hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation : HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry : SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning , and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP , and audit/compliance requirements.
- Contribute to automation (nice to have): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier 3/4 escalation support and participate in on call as needed.
Key Responsibilities
- Design, implement, and optimize FortiGate based SD WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security : zones, objects, policies, NAT (central NAT) , UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site to site VPNs (route/policy based), IPsec HA , and hub and spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST , VLANs, link aggregation ( LACP/EtherChannel ), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter VLAN routing, and east west policies across access/distribution with clear zone models.
- Implement high availability : FortiGate A P/A A clusters , dual homed uplinks, first hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation : HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry : SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning , and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP , and audit/compliance requirements.
- Contribute to automation (nice to have): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier 3/4 escalation support and participate in on call as needed.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: Engineering - Hardware & NetworksRole Category: IT NetworkRole: Network (Support) EngineerEmployement Type: Full timeContact Details:
Company: ZensarLocation(s): Bengaluru+ View Contact
Keyskills: Performance tuning Automation WAN HSRP IPS Monitoring STP MPLS Capacity planning Firewall
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in