Job Description Network Tower Lead

Primary SME Specializations

Profiles may be shortlisted in one or more of the following areas:

LAN and Routing/Switching

- Cisco or Juniper enterprise switching
- VLANs and segmentation
- STP, routing and redundancy
- QoS and high availability
- Campus and data-centre networking

Wireless LAN

- Wireless controllers and access points
- RF fundamentals and 802.11 standards
- Roaming and mobility
- Coverage and performance optimization
- Wireless security and assurance

Firewall and VPN

- Cisco, Fortinet or equivalent firewall platforms
- Firewall policies, ACLs and NAT
- IPsec and SSL VPN
- Remote-access VPN
- IPS and malware protection

Network Access Control

- Aruba ClearPass, Cisco ISE or equivalent
- 802.1X and RADIUS
- EAP-TLS and certificate authentication
- Device posture and profiling
- Guest and contractor access

DDI

- DNS, DHCP and IP address management
- Infoblox or comparable platforms
- High availability and replication
- Network discovery
- Address-space governance

Monitoring and Automation

- Network monitoring and telemetry
- Packet capture and protocol analysis
- Configuration compliance
- REST APIs
- Python and Ansible
- Workflow and health-check automation

Key Responsibilities

- Act as the L3 technical authority for assigned network technologies.
- Resolve complex incidents and service requests within agreed targets.
- Lead technical diagnosis and service recovery during major incidents.
- Use logs, packet captures, telemetry, topology and configuration analysis to isolate faults.
- Perform root-cause analysis and recommend permanent corrective actions.
- Create problem records, known-error documentation and preventive actions.
- Design, configure, test and implement complex network changes.
- Prepare:
- Impact assessments
- Implementation plans
- Validation steps
- Test plans
- Backout plans
- Prepare and review HLDs, LLDs,



SOPs, runbooks and as-built documentation.
- Monitor availability, performance, capacity and threshold exceptions.
- Recommend network tuning, resilience and optimization measures.
- Administer applicable technologies covering:
- LAN and WLAN
- Routing and switching
- Firewalls and VPN
- NAC
- DDI
- Configuration backups
- Support firmware and software upgrades.
- Perform vulnerability remediation and device hardening.
- Support hardware replacement, RMA and EOL/EOS remediation.
- Maintain accurate CMDB records, configurations, topology diagrams and audit evidence.
- Coordinate with OEMs, carriers, security, cloud, hosting, onsite and application teams.
- Participate in transition, migration, cutover, hypercare and stabilization activities.
- Mentor L1 and L2 engineers.
- Conduct technical knowledge sessions and improve troubleshooting playbooks.
- Develop automation for:
- Health checks
- Configuration deployment
- Compliance validation
- Operational reporting
- Repetitive support tasks
- Participate in on-call support and planned maintenance windows.

Mandatory Technical Skills

- Expert knowledge of:
- TCP/IP
- Subnetting
- VLANs
- STP/RSTP/MST
- HSRP/VRRP
- OSPF
- BGP
- Deep production-level expertise in at least one SME specialization.
- Working understanding of dependencies across LAN, WLAN, firewall, VPN, NAC and DDI.
- Experience with high availability, redundancy, failover, segmentation and QoS.
- Robust troubleshooting capability using:
- Wireshark
- CLI diagnostics
- SNMP
- Syslog
- NetFlow/IPFIX
- Monitoring dashboards
- Experience with ServiceNow or an equivalent ITSM platform.
- Strong understanding of Incident, Problem and Change Management.
- Working knowledge of Python, Ansible, REST APIs or comparable automation tools is preferred.
- Awareness of cloud networking, SD-WAN, SASE and Zero Trust principles.
- Ability to independently execute complex production changes.

📌 Network Firewall_Hyderabad (Hyderabad)
🏢 Tata Consultancy Services
📍 Hyderabad