Designation :Senior Network SME -Enterprise Infrastructure, Security and Cloud Networking

Experience: Minimum 13+ years

Certification: CCIE or CCNP

Role Type: Individual Contributor

Position Summary:

We are seeking a highly experienced Senior Network Subject Matter Expert (SME) with a minimum of 13 years of hands-on experience in designing, supporting, securing and optimizing large-scale enterprise network environments. The role serves as a senior individual contributor and the highest level of technical escalation for complex network incidents, architectural decisions, technology standards and infrastructure transformation initiatives.

The successful candidate must hold a valid CCIE or CCNP certification and demonstrate expert-level capability across enterprise routing and switching, network security, WAN and SD-WAN, wireless, network access control, application delivery, cloud connectivity, monitoring and advanced troubleshooting.

Role Purpose:

- Provide authoritative technical leadership without direct people-management responsibility.
- Own complex troubleshooting, root cause analysis, design validation and technical risk assessment.
- Establish engineering standards, reference designs, operational runbooks and technical best practices.
- Ensure network solutions are resilient, secure, scalable, supportable and aligned with business requirements.

Mandatory Qualifications

Experience:

- Minimum 13 years of hands-on experience in enterprise networking, network security or infrastructure engineering.
- Proven experience supporting large and complex network estates, preferably exceeding 1,000 network devices across multiple sites or countries.
- Demonstrated experience as an L3 engineer, technical lead, network architect, principal engineer or subject matter expert.
- Strong background in major incident resolution, problem management, change implementation, capacity planning and network lifecycle management.
- Experience working in highly regulated environments such as financial services, banking or insurance is preferred.

Certification:

- CCIE Enterprise Infrastructure.
- CCNP Enterprise is mandatory where the candidate does not hold CCIE.
- Additional vendor certifications in Check Point, F5, Zscaler, Aruba, Cisco Wireless, Cisco ISE or Microsoft Azure are advantageous.

Key Responsibilities

- Act as the highest technical escalation point for critical and complex network incidents across routing, switching, security, wireless, WAN, SD-WAN and cloud connectivity.
- Lead deep technical investigations, packet-level analysis and root cause analysis, and define corrective and preventive actions.
- Review and validate high-level and low-level network designs, implementation plans, migration approaches, rollback plans and test strategies.
- Develop and maintain network architecture standards, configuration baselines, engineering guidelines, operational procedures and troubleshooting runbooks.
- Assess technical risks, infrastructure dependencies, performance constraints and security implications before production changes.
- Provide technical oversight during major upgrades, migrations, resilience tests,



technology refreshes and infrastructure transformation programs.
- Identify recurring network issues and recommend automation, monitoring, capacity or design improvements.
- Conduct technical reviews with internal teams, service providers and technology vendors.
- Support governance, regulatory reviews and audits by providing accurate technical evidence and explanations.
- Mentor engineers through technical guidance, knowledge-sharing sessions and complex case reviews, without formal line-management responsibility.

Core Technical Expertise

1. Enterprise Routing and Switching

- Expert knowledge of BGP, OSPF, EIGRP, route redistribution, policy-based routing, PIM, multicast, GRE, VRF and first-hop redundancy protocols.
- Expert knowledge of VLANs, STP, RSTP, MST, EtherChannel, vPC, HSRP, QoS and high-availability designs.
- Advanced configuration and troubleshooting experience with Cisco Nexus 9000, 7000, 5000 and 2000 platforms, Cisco Catalyst switches, Cisco ASR and ISR routers.
- Experience with modern data-center technologies such as VXLAN EVPN is preferred.

2. Network Security

- Expert-level experience with Check Point firewalls, including security policy, NAT, VPN, IPS, threat prevention, application control, URL filtering and troubleshooting.
- Strong experience with Zscaler Internet Access or Blue Coat ProxySG, including SSL inspection, certificate validation, authentication integration and web-access troubleshooting.
- Working knowledge of security-zone design, segmentation, secure remote access and firewall-rule governance.

3 . Application Delivery and Load Balancing

- Hands-on configuration and troubleshooting experience with F5 LTM, GTM and APM.
- Robust understanding of load-balancing methods, health monitors, SSL offloading, traffic management, application publishing and high availability.

4. Network Access Control and Identity

- Strong experience with Forescout NAC and Cisco ISE, including 802.1X, MAB, RADIUS, TACACS+, endpoint profiling, posture, policy enforcement and dynamic VLAN assignment.
- Ability to troubleshoot authentication, authorization, profiling and endpoint-classification issues across wired and wireless environments.

5. Wireless Networking

- Hands-on experience with Cisco and Aruba enterprise wireless solutions, including controllers, access points, WLAN configuration, RF optimization, roaming and high-density deployments.
- Ability to investigate wireless performance, interference, authentication, client-driver and connectivity issues using controller data, packet captures and endpoint logs.

6. WAN, VPN and SD-WAN

- Strong knowledge of MPLS, Internet WAN, carrier circuits, site-to-site IPsec VPN, hybrid WAN and resilient active-active connectivity designs.
- Hands-on experience with Cisco SD-WAN or Citrix SD-WAN,



including policy, path selection, traffic steering and troubleshooting.

7. Cloud and Hybrid Networking

- Hands-on knowledge of Microsoft Azure networking, including VNETs, VNET peering, ExpressRoute, VPN Gateway, Network Security Groups, Azure Firewall and load balancers.
- Understanding of hybrid-cloud connectivity, routing, segmentation, DNS integration and secure application access.

8 . Monitoring and Advanced Troubleshooting

- Advanced troubleshooting using Wireshark and platform-specific debugs, logs and diagnostic commands.
- Experience with Splunk, network monitoring platforms, SNMP, syslog, NetFlow, alert correlation and performance trending.
- Ability to analyze latency, packet loss, retransmissions, routing instability, interface errors, hardware resource utilization and application-flow issues.

Technical Deliverables

- High-level and low-level network designs.
- Technical standards and configuration baselines.
- Root cause analysis and problem-management reports.
- Implementation, migration, rollback and validation plans.
- Resilience, failover and disaster-recovery test evidence.
- Risk assessments, capacity recommendations and lifecycle roadmaps.
- Operational procedures, troubleshooting guides and knowledge articles.

Professional Competencies

- Strong analytical and structured troubleshooting capability.
- Clear written and verbal communication with technical and non-technical stakeholders.
- Ability to explain complex network issues in concise business terms.
- Sound judgement during high-severity incidents and production changes.
- Strong documentation, governance and audit-support discipline.
- Ability to work independently while collaborating effectively with operations, security, cloud, application and vendor teams.

Preferred Industry and Environment

- Financial services, banking, insurance or another regulated enterprise.
- Multi-country or regional infrastructure environment.
- Large managed-services or hybrid in-house/vendor delivery model.
- 24x7 business-critical infrastructure with formal incident, problem and change-management processes.

Success Measures

- Effective resolution of complex and high-severity network incidents.
- Reduction in repeat incidents through sustainable corrective actions.
- Quality and accuracy of network designs, standards and technical documentation.
- Successful delivery of migrations, upgrades and resilience testing with controlled risk.
- Improved network reliability, security, performance and operational supportability.
- Consistent knowledge transfer and technical uplift across engineering teams.

Ideal Candidate Profile A senior hands-on network specialist who combines CCIE or CCNP certification with 13+ years of enterprise experience, deep multi-domain expertise and the ability to own the most complex technical challenges from diagnosis through permanent resolution. This is an individual-contributor SME role, not an operations-management position.

Interested person can drop their resume at [email protected] with following details:

Current CTC, Expected CTC, Notice period/LWD, Current Location

📌 Senior Network SME (Gurugram)
🏢 RENOVISION AUTOMATION SERVICES PVT.LTD
📍 Gurugram