Cisco Ise L2 – Senior Network Engineer

Neev; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Neev in Gurugram is seeking a Senior Network Engineer (L2) to manage day-to-day network operations, monitor health, and resolve L2 issues under L3 guidance.

The role involves DNAC, ISE, ThousandEyes, Fortinet, and WLC environments, device configuration, report analysis, and participation in change management.

Qualifications

• Experience in network operations, monitoring, and L2 troubleshooting.
• Hands-on with DNAC, ISE, ThousandEyes, and WLC.
• Familiarity with Fortinet solutions – FortiGate, FortiAnalyzer, and FortiManager.
• Knowledge of 802.1X authentication mechanisms, including EAP-TLS and PEAP.
• Scripting basics in Python, Bash, or Ansible.
• Strong documentation and change management skills.

Responsibilities

• Monitor network health, devices, and dashboards; resolve L2 issues.
• Provision switches and access points using DNAC templates.
• Troubleshoot VPN, connectivity, and telemetry issues.
• Escalate complex authentication and policy issues to L3 teams.
• Monitor firewall logs and security alerts via FortiAnalyzer; assist with rule reviews.
• Maintain network inventory, firmware versions, and RMA coordination.
• Back up configurations and perform basic Cisco Nexus operations.

Skills

L2/L3 networking

Network monitoring

Wireless & WLAN

DNAC

ISE

ThousandEyes

Fortinet

802.1X authentication

Python/Bash/Ansible

Documentation & ITSM

Tools

Cisco DNAC

Cisco ISE

Cisco ThousandEyes

FortiGate/FortiAnalyzer/FortiManager

Cisco WLC

Wireshark

Job description

Job Description – Sr. Network Engineer (L2)

Role: L2 – Senior Network Engineer

Experience Required: 4–8 Years

Employment Type: Permanent

Job Location: Gurugram

Working Days: 5 Days a Week

Job Overview

We are looking for an experienced L2 Senior Network Engineer with strong expertise in network operations, monitoring, troubleshooting, and infrastructure support. The role involves managing day-to-day network operations, monitoring network health, resolving L2 issues, and executing configuration changes under defined SOPs and guidance from L3 teams.

Key Responsibilities

• Cisco DNAC Support
• Monitor network health, device compliance, and assurance dashboards.
• Assist in provisioning switches and access points using DNAC templates.
• Generate and analyze DNAC reports, including inventory, SWIM, topology, and client health.
• Perform basic troubleshooting of synchronization failures and telemetry issues.
• Cisco ISE (NAC / EAP-TLS / MDM / RADIUS / TACACS+)
• Monitor authentication logs and troubleshoot 802.1X authentication failures (EAP-TLS, PEAP).
• Verify endpoint posture assessments and MDM compliance status.
• Troubleshoot user and machine certificate-related issues.
• Perform ISE node and PSN health checks.
• Handle basic ISE operations, including endpoint addition, profiling checks, and session clearing.
• Escalate complex authentication and policy-related issues to L3 teams.
• Cisco ThousandEyes
• Monitor agent health, alerts, and network performance.
• Validate synthetic tests and endpoint agent functionality.
• Troubleshoot basic connectivity and agent installation issues.
• Fortinet – FortiGate, FortiAnalyzer & FortiManager
• Monitor firewall logs and security alerts through FortiAnalyzer.
• Assist with firewall rule reviews and rule lifecycle management.
• Execute standard configuration updates through FortiManager under guidance.
• Perform basic troubleshooting of VPN connectivity, interface flaps, and routing issues.
• IT Asset Management
• Maintain and update network inventory, including switches, access points, routers, and firewalls.
• Track firmware versions, EOL/EOS status, and compliance requirements.
• Assist with spare inventory management and RMA coordination.
• LAN Switching – Cisco / Brocade / Nexus
• Troubleshoot access-layer network issues involving VLANs, trunking, and STP.
• Perform switch port configuration, MAC address tracing, and interface health checks.
• Handle basic Cisco Nexus operations, including vPC checks and interface monitoring.
• Perform configuration backups and restoration activities.
• Scripting & Automation Support
• Execute pre-built scripts using Python, Bash, and Ansible for routine automation tasks.
• Assist in log collection, report generation, and operational activities using automation tools.
• DHCP Support
• Troubleshoot IP address conflicts and DHCP scope exhaustion.
• Validate DHCP leases and address assignment logs.
• Check DHCP relay configurations (IP Helper) and related connectivity issues.
• NIPS (Network Intrusion Prevention System)
• Monitor intrusion alerts and security events.
• Perform initial analysis of suspicious network activity and suspend findings to relevant teams.
• Validate sensor health and connectivity.
• Cisco Wireless LAN Controller (WLC)
• Troubleshoot wireless client connectivity issues, including authentication failures, DHCP, and roaming.
• Monitor wireless controller and access point health.
• Modify WLAN configurations as per defined SOPs.
• Troubleshoot RF parameters, AP join issues, and client load-related problems.

Required Skills & Qualifications

• Strong understanding of L2/L3 networking fundamentals, including VLANs, STP, EtherChannel, DHCP, and basic routing.
• Hands‑on experience in network monitoring, operations, and L2 troubleshooting.
• Familiarity with Cisco DNAC, Cisco ISE, Cisco ThousandEyes, and Cisco WLC.
• Working knowledge of Fortinet solutions – FortiGate, FortiAnalyzer, and FortiManager.
• Understanding of 802.1X authentication mechanisms, including EAP‑TLS and PEAP.
• Familiarity with troubleshooting tools such as Wireshark, DNAC Assurance, ThousandEyes, and FortiAnalyzer.
• Basic scripting knowledge in Python, Bash, or Ansible.
• Good documentation, incident management, and change management skills.

Experience Requirements

• 4–8 years of relevant experience in Network Operations, Network Support, or Infrastructure Support.
• Experience in monitoring, troubleshooting, and executing network changes in an enterprise environment.
• Ability to handle L2 operational issues independently and coordinate with L3 teams for complex escalations.

Skills: cisco ise,routing,fixed wireless,dnac,troubleshooting,operations