Required Skillsets:

1. L3 support for Azure & on-prem Core network infrastructure.

2. End to end configuration knowledge and hands on experience with Cloud and Onprem network. (Azure Firewall, Cisco ASA, Juniper, Fortigate)

3. vWan Hub, vNet, NSG Configuration and Implementation

4. Assist with network configuration for major projects and routine changes

5. Strong understanding of network protocols, including TCP/IP, BGP, OSPF, and VPN

6. Gateway Configuration ( VPN Gateway ALWAYS On VPN setup and confihuration & App Gateway etc.)

7. Express Route Connectivity setup, Configuration of Route Table and UDR. Managing internal and external traffic.

8. zScaler websecurity and managing the overall outbound web traffic of enterprise users.(End to end ZIA configuration & management)

9. Stakeholder management including internal and external vendors.

10. Network Security (Zero Trust Network, CASB, Cloud Security), Cyber Defense, Vulnerability Management, Security Architecture and best practices.

Detailed Roles & Responsibilities:

- Firewall Management Hosted in Azure cloud. (CISCO ASA, Juniper and Azure Firewall)
- Switch and Router management.
- Provision and Manage VNET, Subnet, NSGs, Routes, Express Route, IPSEC tunnel.
- Manage and Monitor Azure log Analytics
- L2/L3 cloud network administration and troubleshooting.
- FW/zScaler access definition based on ATD/SIEM requests.
- VA remediation and reporting based on security reporting
- Managing the IP segment & IP assignment for Cloud resources.
- Handling network related tasks in Azure like Vnet creation, Vnet peering, address space/subnet allocation, NSG creation and managing NSG rules.




- Design and architect customer network environment.
- Configuration changes, device addition, decommission process.
- L2 & L3 support for on-premises network configuration and management.
- Managing the traffic routings for IaaS/PaaS platform in azure.
- Implement the security configuration/hardening as per CIS security standard and requirement.
- Disaster Recovery management and support as per requirement.
- Provide the zScaler websecurity and managing the overall outbound web traffic of enterprise users
- Managing zScaler location created for OU, Domestic and International locations and related configuration.
- Create and manage Cloud App Control and URL Category global policy for enterprise users based on AD Groups / Department
- Managing location and user specific cloud app and URL category policy
- Managing the authentication configuration and SSL inspection of all location users
- Create and manage custom policy to allow traffic on non-standard ports (FTP, SFTP and other web services running on non-standard ports)
- Continuous assessment on botnet traffic and notifying respective stakeholders for timely action from suspected devices
- Analyze and report the overall web traffic pattern and threat detection on regular basis
- Troubleshooting end user web traffic related issues and recommending corrective measures to fix the issue
- Manage the PAC file configuration in-line with zScaler access policy
- Performing public IP configuration change for domestic and international location in zScaler policy based on network service provider request.
- Adaptable to learn new technologies and work in azure infra requests.

📌 Azure Network Engineer - S (Chennai)
🏢 Tata Consultancy Services
📍 Chennai