Senior Network Engineer

• Vendor certifications, e.g., CCNP and F5, etc.
• An advanced degree in Computer Science or a related field.
• Hands-on experience with major cloud providers, e.g. AWS, OCI and GCP, etc.

• Troubleshooting & Support: Own escalations on complex Cisco routing and switching incidents - the kind where the obvious counters don't tell the story. Examples: data path utilization, punt-path saturation, ring overruns and backpressure, BGP path-selection and convergence problems, BFD scale and timer tuning, uRPF mode selection on asymmetric paths. The candidate will drive root cause through data path analysis, packet capture (embedded, SPAN, ERSPAN, Wireshark), and disciplined hypothesis testing - and feed every fix back into the runbook.
• Monitoring & Maintenance: Own day-to-day network health - which starts with knowing what "normal" looks like well enough to spot drift before alarms fire. Trend interface utilization, BGP prefix counts, control-plane CPU and memory, ASIC TCAM/FIB scale. Pull telemetry from SNMP, NetFlow, syslog and turn it into real capacity forecasts - not "are we full" but "when will we be full at current growth, and what's the lead time on the upgrade."
• Run maintenance windows, with written MOPs that are approved, pre-checks and config snapshots, rollback plans, post-change verification. Manage software lifecycle and hardware spares. Keep config backup and compliance scanning honest via RANCID/Oxidized or equivalent. Test procedures line by line in lab or simulator, test by failing the link, watching BGP reconverge, confirm the route policy worked correctly.
• Security & Compliance: Treat network security as a daily discipline, not a quarterly project. The fundamentals at the edge: infrastructure ACLs, uRPF in the right mode for each interface, max-prefix limits and prefix-list / AS-path filtering on customer and peer sessions. Manage segmentation, - VRFs, VLANs, and security zones that mean are following the standards. Keep AAA tight (TACACS+/RADIUS, command authorization, accounting logs that are reviewed). Audit ACL sprawl periodically and retire stale or shadowed rules. Track PSIRT advisories against the deployed fleet and prioritize upgrades by actual exposure. Maintain DDoS posture (RTBH, scrubbing-service integration as applicable). Keep the environment audit-ready year-round for PCI-DSS / SOC-2.

Technical Expertise with 7+years experience, this role is built for engineers who understand networks at the protocol and platform level, not just at the abstraction layer. We're a Cisco shop across routing, switching, and firewalls - IOS-XE, NX-OS, and IOS-XR experience expected, not optional. Strong fundamentals first; tooling on top.

• Solid working knowledge of TCP/IP, the OSI model, and modern routing/switching - BGP, OSPF, MPLS, VXLAN/EVPN, STP families, wireless, and WAN optimization, including the common failure modes of each.
• Hands-on with firewalls, IPsec and SSL/remote-access VPNs, network security fundamentals, and load balancing on F5 BIG-IP LTM and GTM/DNS — design, troubleshooting, cert renewals, profile/pool hygiene, monitor tuning.
• Scripting and automation built on top of fundamentals. CLI fluency and bash / awk / sed / regex are the daily routine - for log mining, show-output parsing, ad-hoc triage. Python for the heavier lifting (APIs, multi-device orchestration, structured parsing). Every script should reflect that you understand the device level - automation accelerates good engineers, it doesn't substitute for them.
• Documentation in Confluence with Visio (or equivalent) - updated when the network changes.
• Familiar with cloud networking (AWS VPC, Transit Gateway, Direct Connect; Azure VNet, ExpressRoute), SD-WAN, and modern data center fabrics (Nexus VXLAN/EVPN, ACI).
• Strong English verbal and written skills.

• Hybrid, combination of Bangalore office.
• 24x7 on-call rotation for critical incidents.