About the Company

The Network Engineer owns everything that moves traffic and enforces perimeter policy: switches, VLANs, wireless, the FortiGate firewall, and the NPS server that authenticates devices onto the network via EAP-TLS.

About the Role

Key Responsibilities

Switching & Wireless

- Manage switch configuration, port security, and VLAN segmentation across sites.
- Manage wireless network infrastructure: SSIDs, WLAN controllers, coverage, and capacity planning.
- Maintain network topology documentation and IP address management (IPAM).

Firewall & Perimeter

- Administer the FortiGate firewall(s): rule-base management, NAT, VPN gateway configuration, and site-to-site connectivity.
- Manage remote-access VPN and review firewall rule-change.
- Own DNS/DHCP infrastructure and network-level traffic monitoring and bandwidth management.

Network Access Control

- Administer the NPS server for EAP-TLS network authentication (802.1X) for wired and wireless clients, including certificate-based client authentication policy.
- Coordinate with the Senior IT Admin on the certificate/PKI lifecycle (AD Certificate Services) that backs EAP-TLS.

Architecture & Resilience

- Propose network segmentation and architecture changes, implementing them once approved by the CISO.




- Own network uptime/performance monitoring and lead the technical response to connectivity incidents.
- Maintain change documentation and rollback plans for all network and firewall changes.

Qualifications

3–5 years in network engineering or network administration, with hands-on FortiGate (or equivalent next-generation firewall) administration and enterprise switching experience. Exposure to RADIUS/802.1X network authentication is a robust plus.

Required Skills

- Enterprise switching & VLANs — 802.1Q trunking, spanning tree, port security.
- FortiGate/FortiOS administration: policies, NAT, IPsec/SSL VPN, UTM profiles.
- Wireless networking — WPA2/3-Enterprise, RF planning.
- RADIUS/NPS and 802.1X/EAP-TLS network authentication, certificate-based auth concepts.
- DNS/DHCP, IPAM, and routing fundamentals (static routing, OSPF/BGP as applicable).
- Network monitoring/observability tooling and packet-capture troubleshooting (Wireshark).
- Change documentation and network architecture diagramming.

Preferred Skills

- Fortinet NSE 5–7, Cisco CCNP, CompTIA Network+, Certified Wireless Network Administrator (CWNA).

📌 Network Engineer (Bengaluru)
🏢 Bellatrix Aerospace
📍 Bengaluru