Network Engineer
- Zensar
- 0 - 9 years
- Bengaluru
- 2 months ago
- Email to a friend
- Report this job
Job Description
Key Responsibilities
- Design, implement, and optimize FortiGate based SD WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security : zones, objects, policies, NAT (central NAT) , UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site to site VPNs (route/policy based), IPsec HA , and hub and spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST , VLANs, link aggregation ( LACP/EtherChannel ), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter VLAN routing, and east west policies across access/distribution with clear zone models.
- Implement high availability : FortiGate A P/A A clusters , dual homed uplinks, first hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation : HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry : SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning , and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP , and audit/compliance requirements.
- Contribute to automation (nice to have): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier 3/4 escalation support and participate in on call as needed.
Key Responsibilities
- Design, implement, and optimize FortiGate based SD WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security : zones, objects, policies, NAT (central NAT) , UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site to site VPNs (route/policy based), IPsec HA , and hub and spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST , VLANs, link aggregation ( LACP/EtherChannel ), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter VLAN routing, and east west policies across access/distribution with clear zone models.
- Implement high availability : FortiGate A P/A A clusters , dual homed uplinks, first hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation : HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry : SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning , and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP , and audit/compliance requirements.
- Contribute to automation (nice to have): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier 3/4 escalation support and participate in on call as needed.
Key Responsibilities
- Design, implement, and optimize FortiGate based SD WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security : zones, objects, policies, NAT (central NAT) , UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site to site VPNs (route/policy based), IPsec HA , and hub and spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST , VLANs, link aggregation ( LACP/EtherChannel ), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter VLAN routing, and east west policies across access/distribution with clear zone models.
- Implement high availability : FortiGate A P/A A clusters , dual homed uplinks, first hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation : HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry : SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning , and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP , and audit/compliance requirements.
- Contribute to automation (nice to have): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier 3/4 escalation support and participate in on call as needed.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: Engineering - Hardware & NetworksRole Category: IT NetworkRole: Network (Support) EngineerEmployement Type: Full timeContact Details:
Company: ZensarLocation(s): Bengaluru+ View Contact
Keyskills: Performance tuning Automation WAN HSRP IPS Monitoring STP MPLS Capacity planning Firewall
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
Zensar
Zensar Technologies Limited Zensar Technologies is among the top 25 software and BPO services providers in India. It is an RPG Group company. Headquartered in India, Zensar Technologies has marketing presence in US, Europe and Asia Pacific regions. The company has operations and a customer bas...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in