Job Summary

Network Security

Key Responsibilities

- Inventory all in-scope MX67 appliances, sites, serial numbers, licensing, WAN circuits, public IP addresses, VLANs, routes, VPN peers, firewall policies, NAT rules, DHCP settings, traffic-shaping policies, and monitoring integrations.
- Review device utilization, throughput, user count, VPN demand, resiliency, security subscriptions, interface needs, and future growth to validate the target appliance model and license tier.
- Prepare the high-level and low-level design, migration method, implementation plan, rollback plan, test plan, outage schedule, risk register, and stakeholder communication plan.
- Coordinate hardware, license, circuit, cabling, rack or desktop placement, power, access, change approvals, and vendor support prerequisites.
- Claim and stage replacement appliances in the Meraki Dashboard; apply current approved firmware and recreate or migrate the validated configuration.
- Preserve required Layer 3 and Layer 7 firewall controls, NAT, VLAN and DHCP services, static routes, SD-WAN, AutoVPN, IPsec VPN, client VPN, traffic shaping, content filtering, malware protection, IDS/IPS, syslog, NetFlow, and alerting settings.
- Perform configuration peer review and pre-cutover validation, including port mapping, addressing, routing, policy order, VPN parameters, and upstream or downstream dependencies.
- Execute the cutover within the approved change window, maintain command-center communication, capture timestamps and evidence, and initiate rollback when agreed thresholds are breached.
- Validate WAN connectivity, DNS, DHCP, routing, internet access, business applications, VPN tunnels, failover, security policies, logging, monitoring, and performance after migration.
- Monitor the refreshed gateway during the stabilization period, resolve defects, tune policies where approved,



and coordinate vendor escalation when required.
- Remove the legacy appliance from production and the management inventory only after acceptance; sanitize, return, recycle, or dispose of it in accordance with asset and security procedures.
- Update diagrams, configuration records, asset inventories, support records, operational procedures, and the configuration management database, then complete knowledge transfer and formal handover.

Skill Requirements

- Relevant experience implementing and supporting enterprise or branch firewalls, routers, SD-WAN, and secure network services.
- Hands-on expertise with Cisco Meraki MX appliances and the Meraki Dashboard, including appliance provisioning, firmware, licensing, templates, organizations, networks, and troubleshooting tools.
- Robust knowledge of TCP/IP, VLANs, DHCP, DNS, NAT, static and dynamic routing concepts, dual-WAN resiliency, IPsec, AutoVPN, remote-access VPN, and high-availability principles.
- Working knowledge of next-generation firewall controls, Layer 7 policy, IDS/IPS, malware protection, content filtering, segmentation, logging, and security monitoring.
- Experience executing production changes under ITIL-based change, incident, problem, configuration, and asset-management processes.
- Ability to produce implementation plans, rollback procedures, test evidence, network diagrams, risk assessments, and operational handover documentation.
- Strong troubleshooting, stakeholder coordination, vendor management, and written and verbal communication skills.
- Ability to work during planned maintenance windows and provide post-implementation support.

Other Requirements

- Cisco Certified Network Associate, Cisco Certified Network Professional, Cisco Meraki Solutions Specialist, or equivalent networking and security certification.
- Experience refreshing network security appliances across multiple branch locations.

📌 Track Lead - IT security (India)
🏢 HCL Technologies
📍 India