Experience:
8–9 Years Role Type: Full-Time Job

Location:
Pune, India (with support for global office locations) Role Overview: Experienced Senior Network Engineer to manage, maintain, secure, and optimize the organization's enterprise network infrastructure across its global office locations. Should have strong hands-on experience in network engineering, firewall administration, LAN/WAN, enterprise switching, wireless networking, network security, and troubleshooting in a multi-vendor environment. The role requires practical experience with Fortinet, SonicWall, Sophos, Dell, Cisco switching, Cisco Meraki, wireless access points, and wireless controllers. The candidate will work closely with Internal IT, Infrastructure, Information Security, and other technology teams to ensure secure, reliable, resilient, and high-performing network services aligned with business requirements and organizational security policies.

Key Responsibilities
1. Network Infrastructure Management ● Design, implement, configure, administer, and maintain enterprise LAN and office network infrastructure. ● Manage and troubleshoot Cisco and Dell switches, VLANs, inter-VLAN routing, STP, link aggregation, and network segmentation. ● Configure and maintain routing protocols and technologies, including static routing, OSPF, and BGP, where applicable. ● Manage network connectivity across offices, internet links, site-to-site VPNs, remote-access VPNs, and redundant network connections. ● Monitor network availability, performance, bandwidth utilization, latency, packet loss, and capacity. ● Maintain network diagrams, IP address management, configuration backups, asset inventory, and technical documentation. 2. Firewall Administration and Network Security ● Administer and troubleshoot enterprise firewalls, including: Fortinet, SonicWall, Sophos Firewall ● Configure and manage firewall policies, NAT, access control rules, VPN tunnels, routing, security profiles, and high-availability configurations. ● Perform firewall rule reviews, policy cleanup, configuration backups, firmware upgrades, and security patching. ● Implement least-privilege access, secure network segmentation, and appropriate controls for internal, guest, and other network zones. ● Analyze firewall logs, traffic patterns, blocked connections, and security events to identify and resolve network-related risks. ● Coordinate with the Information Security team on vulnerability remediation, security incidents, risk mitigation, and firewall hardening. ● Ensure firewall configurations and changes follow approved change management and security procedures. 3. Wireless Network and Access Point Management ● Deploy, configure, administer, and troubleshoot enterprise wireless networks and access points. ● Manage Cisco Meraki wireless infrastructure, including cloud-based dashboard administration, access points, policies, firmware, and monitoring. ● Administer Cisco wireless access points and wireless LAN controllers (WLCs), where deployed. ● Manage Sophos wireless access points and associated management platforms. ● Configure corporate and guest Wi-Fi, SSIDs, VLAN mapping, authentication, access controls, and wireless security policies. ● Troubleshoot roaming issues, signal coverage, interference, channel utilization, authentication failures, and connectivity drops. ● Perform wireless coverage assessments and capacity planning to ensure reliable connectivity and a positive employee experience. 4.



Network Monitoring, Troubleshooting and Operational Support ● Proactively monitor network devices, firewalls, wireless infrastructure, internet links, and critical network services. ● Troubleshoot complex Layer 2 and Layer 3 issues using packet captures, logs, diagnostic tools, and protocol analysis. ● Manage network incidents, service requests, problem records, and changes in accordance with defined SLAs and IT service management processes. ● Perform root cause analysis for recurring outages and implement preventive and corrective actions. ● Coordinate with ISPs, OEMs, service providers, and technology partners for incident resolution and infrastructure upgrades. ● Participate in planned maintenance, network migrations, hardware refreshes, and business continuity or disaster recovery exercises. ● Provide technical guidance to L1/L2 support teams and assist in resolving escalated network issues. 5. Information Security and ISO Compliance ● Apply network security controls in alignment with the organization's Information Security Management System (ISMS) and applicable ISO/IEC 27001 requirements. ● Understand the IT Service Management System (SMS) and follow established incident, problem, change, configuration, and service-level management processes. ● Support internal and external audits by providing network configurations, access reviews, change records, evidence, and remediation updates. ● Maintain compliance with approved security policies, network access standards, asset management procedures, and operational controls. ● Support vulnerability assessments, security audits, firewall reviews, and remediation of identified network risks. ● Assist in enforcing secure configurations, restricted administrative access, MFA where supported, secure management protocols, and logging requirements. ● Participate in security incident investigations and provide network-level evidence and technical analysis. ● Follow organizational policies for data protection, acceptable use, access control, and business continuity. 6. Change Management and Continuous Improvement ● Prepare and execute network changes through approved change management processes, including impact assessment, implementation plans, validation, and rollback procedures. ● Maintain accurate network documentation, configuration baselines, standard operating procedures, and knowledge articles. ● Identify opportunities to improve network availability, security posture, operational efficiency, and employee experience. ● Contribute to infrastructure standardization, technology lifecycle management, capacity planning, and cost optimization. ● Support new office setups, network expansions, technology deployments, and global infrastructure initiatives. Required Technical Skills Network Technologies ● Strong knowledge of TCP/IP, IPv4/IPv6 fundamentals, subnetting, DNS, DHCP, ARP, ICMP, NAT, VLANs, trunking, STP/RSTP, and routing. ● Hands-on experience with enterprise LAN/WAN, site-to-site VPN, remote-access VPN, and internet connectivity. ● Experience with network redundancy,



high availability, and troubleshooting methodologies. Firewalls: ● Strong hands-on experience with Fortinet. ● Practical experience administering SonicWall and Sophos firewalls. ● Knowledge of firewall policies, NAT, VPN, routing, logging, security profiles, firmware management, and configuration backup/restore. Switching and Wireless: ● Hands-on experience with Cisco and Dell switches. ● Experience with Cisco Meraki dashboard and wireless access points. ● Knowledge of Cisco wireless controllers and enterprise wireless architecture. ● Experience with Sophos access points and wireless administration. ● Understanding of WPA2/WPA3, 802.1X, RADIUS, guest Wi-Fi, wireless segmentation, and access control. Monitoring and Troubleshooting ● Experience with network monitoring, syslog, SNMP, packet capture, Wireshark, and device performance analysis. ● Ability to analyze logs and troubleshoot complex connectivity and performance issues. ● Familiarity with network configuration backup, firmware management, and infrastructure documentation. IT Service Management and Security ● Working knowledge of ITIL-based incident, problem, change, and service request management. ● Understanding of ISO/IEC 27001, ISMS, IT Service Management System (SMS), and information security policies. ● Knowledge of vulnerability management, secure configuration, access reviews, audit evidence, and risk remediation. Qualifications and Experience ● Bachelor's degree or diploma in Computer Science, Information Technology, Electronics, or a related discipline. ● 8–9 years of relevant experience in enterprise networking, firewall administration, and infrastructure operations. ● Demonstrable hands-on experience supporting a multi-vendor network environment in a medium or large organization. ● Experience supporting multiple office locations and business-critical network services. ● Certifications such as CCNA/CCNP Enterprise, Fortinet NSE/FCP, Cisco Meraki, Sophos, or equivalent vendor certifications are desirable. ● ITIL Foundation and ISO/IEC 27001 awareness or implementation experience are advantageous. Preferred Skills ● Experience in a global IT services or consulting organization. ● Exposure to cloud networking, SD-WAN, network access control (NAC), and identity-based network security. ● Familiarity with vulnerability scanning tools, endpoint security integrations, and centralized log monitoring/SIEM. ● Experience with network automation, scripting, and configuration standardization. ● Ability to work independently, manage priorities, and coordinate with cross-functional teams across different time zones. Key Competencies ● Robust analytical and troubleshooting skills. ● Hands-on, service-oriented approach with a focus on ownership and timely resolution. ● Good written and verbal communication skills. ● Strong documentation, change management, and audit-readiness discipline. ● Ability to work under pressure during critical incidents and planned maintenance. Success Measures: ● Network and wireless availability and performance across supported locations. ● Timely resolution of incidents and adherence to defined SLAs. ● Compliance with approved firewall policies, security baselines, and change management procedures. ● Timely remediation of network vulnerabilities and audit findings. ● Accuracy of network documentation, asset inventory, and configuration backups.

📌 Senior Network Engineer (Pune)
🏢 Tres Infosol
📍 Pune