Remote: Hybrid

Role SummaryThe Network Security Engineer will be responsible for managing, monitoring, troubleshooting, designing, and optimizing enterprise network infrastructure, including firewalls, switches, routers, wireless systems, and network security solutions. The role requires deep expertise in routing & switching, network security, architecture design, and integration with enterprise services. The ideal candidate should be capable of leading complex network initiatives, handling critical escalations, and ensuring high availability and security across enterprise environments.Key ResponsibilitiesNetwork Operations & SupportProvide day-to-day operational support for enterprise network infrastructure across multiple locations.Understand and manage complete network topology, including LAN/WAN, VLANs, routing paths, and configurations.Deploy, configure, maintain, and optimize network devices including firewalls, routers, switches, and wireless infrastructure.Monitor network performance (bandwidth, uptime, device health, traffic patterns).Maintain inventory and lifecycle management of network assets.Lead network infrastructure upgrades, migrations, and optimization initiatives.Act as the escalation point for complex network incidents and critical outages.Security & ComplianceConfigure and manage network security devices ensuring confidentiality, integrity, and availability.Implement segmentation, ACLs, intrusion prevention, and access control policies.Apply system hardening standards and ensure compliance with security benchmarks (e.g.,



STIGs).Monitor and analyze logs for security incidents and unusual activities.Enforce identity-based access control, authentication, and authorization mechanisms.Design and review network security architectures and security controls.Troubleshooting & Incident ManagementPerform L2–L3 troubleshooting for connectivity, performance, and access issues.Diagnose network faults using logs, monitoring tools, packet captures, and CLI-based analysis.Identify and resolve issues related to routing, switching, security controls, and access management.Lead Root Cause Analysis (RCA) activities for major incidents.Handle hardware faults and ensure timely issue resolution through proper escalation.Integration & CoordinationIntegrate network devices with enterprise services such as DNS, DHCP, AD, Syslog, SNMP, and NTP.Coordinate with ISPs, OEM vendors, and internal teams for issue resolution.Support secure remote access and site connectivity solutions (VPN, IPSEC, SSL VPN).Collaborate with cloud, security, and infrastructure teams to support hybrid environments.Infrastructure & OptimizationEnsure high availability through redundancy, failover mechanisms, and resilient design.Perform upgrades, patching,



and preventive maintenance activities.Support hybrid/cloud/on-prem data center environments.Use centralized monitoring and automation tools for performance tracking and configuration management.Evaluate and recommend new networking and security technologies.Mandatory Technical SkillsRouting & Switching: VLAN, STP, EtherChannel, SVI, OSPF, EIGRP, BGP, MPLS, FHRP, Static & Agile RoutingSecurity: ACL, Wireshark, Nmap, AAA, SSH, IPSEC, GRE, VPN, SSL VPN, NGFW (Palo Alto, Fortinet, Check Point, Cisco Firepower)Networking Concepts: LAN/WAN, SD-WAN, QoS, Ring/Bus/Hub/P2P/ILL TopologiesWireless: WLC, Access Points, 4G/5G, Meraki, ArubaCloud & Automation: AWS/Azure/GCP Networking, Python, Ansible (Preferred)Tools: Network diagramming (MS Visio)Eligibility CriteriaEducation: Bachelor's Degree in Engineering/Technology or equivalentExperience: 9–12 years of experience in enterprise network and network security management, including architecture design, implementation, troubleshooting, and optimization of large-scale enterprise networks.Preferred QualificationsCCNP EnterpriseCCNP SecurityPCNSENSE 4/5/6/7CCIE (Preferred)CompTIA Security+CISSP (Preferred)Exposure to automation tools and configuration management systemsExperience with SD-WAN, cloud networking, and network automationTravel:As and when required, across the country for project execution and monitoring as well as for coordination with geographically distributed teams.Communication:Submit a cover letter summarising your experience in relevant technologies and software along with a resume and the Latest passport-size photograph.

📌 Network Lead (209863)
🏢 C3iHub, IIT Kanpur
📍 209863