Network Engineer

Navlakha Management Services; Bengaluru; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Navlakha Management Services in Bengaluru is seeking a hands-on Network Engineer to design, configure and support enterprise wireless, firewall, and routing for our customers.

You will work across FortiGate, Juniper SRX, Cisco routing, and wireless controllers, owning incidents through to resolution and delivering clear customer documentation.

Qualifications

• 3 to 4 years in enterprise networking with hands-on configuration and troubleshooting.

Responsibilities

• Configure, operate and troubleshoot enterprise WLAN controllers, access points and RF planning.
• Build and maintain firewall policies on Fortinet FortiGate, Juniper SRX and Cisco ASA/Firepower.
• Configure and troubleshoot routing on Cisco IOS/IOS-XE and Juniper Junos.
• Respond to incidents within SLAs and produce clear change plans and docs.
• Take part in on-site customer engagements around Bengaluru when hands-on work is required.

Skills

Hands-on networking

Wireless networking

Firewall configuration

Routing & switching

VPN configuration

Network troubleshooting

Documentation

English comms

Education

Bachelor's degree in Engineering/CS/IT

Tools

Fortinet FortiGate

Juniper SRX

Cisco ASA/Firepower

Cisco IOS

Job description

We are hiring for a Network Engineer at the Bangalore location

Role purpose :

We are looking for a hands-on network engineer to run and support enterprise wireless, perimeter security, and routing for our customers. This is a working engineering role rather than a coordination one: you will configure the devices yourself, own incidents through to resolution, and produce the documentation that goes back to the customer.

The successful candidate will be comfortable moving between a FortiGate policy, a Juniper SRX zone, a Cisco routing table and a wireless controller in the same day, and will be able to explain to a customer what changed and why.

Key responsibilities

Wireless

• Configure, operate and troubleshoot enterprise WLAN controllers, access points, SSID-to-VLAN mapping, and AP provisioning.
• Implement secure wireless authentication using WPA2/WPA3-Enterprise with 802.1X and RADIUS, and support certificate and guest access methods.
• Carry out RF planning and validation, site surveys, channel and power planning, coverage and interference checks.
• Diagnose client-side problems: association and authentication failures, roaming, sticky clients, band steering and throughput complaints.

Firewall and security

• Build and maintain firewall policies, NAT rules and object groups on Fortinet FortiGate, Juniper SRX and Cisco ASA or Firepower.
• Configure and support IPSec site-to-site and SSL/remote-access VPN, including troubleshooting phase 1 and phase 2 negotiation.
• Operate security profiles application control, web filtering, IPS and antivirus and tune them to reduce false positives.
• Support firewall high availability pairs, firmware upgrades and rule-base reviews and clean-ups.

Routing and switching

• Configure and troubleshoot routing on Cisco IOS/IOS-XE and Juniper Junos static routing, OSPF and basic BGP.
• Support the switched estate: VLANs, trunking, spanning tree, link aggregation and port channels.
• Work with WAN and internet links, including failover, routing policy and ISP coordination.

Operations and delivery :

• Respond to incidents within agreed service levels, perform root cause analysis and close the loop with the customer.
• Raise and execute changes through the change process, including rollback plans and post-change validation.
• Monitor the estate using SNMP, syslog and NMS tooling; investigate using packet captures where needed.
• Produce and maintain configuration documents, as-built records, network diagrams and standard operating procedures.
• Take part in the on-call rota and attend customer sites in and around Bangalore when hands-on work is required.

Essential skills and experience

Experience :

3 to 4 years in enterprise networking, with genuine hands-on configuration and troubleshooting rather than monitoring only.

Wireless :

Working experience with at least one enterprise WLAN platform Cisco (WLC / Catalyst 9800), Aruba, Ruckus or equivalent covering controller and AP configuration, 802.1X and RF troubleshooting.

Firewalls :

Hands-on with at least two of Fortinet FortiGate, Juniper SRX and Cisco ASA / Firepower. Comfortable working at CLI, not only through the GUI.

Routing:

Practical routing and switching on Cisco IOS/IOS-XE or Juniper Junos: static routing, OSPF, VLANs, trunking, spanning tree and link aggregation.

VPN :

Configuration and troubleshooting of IPSec and SSL VPN.

Troubleshooting:

Structured fault isolation, log analysis and packet capture using Wireshark or an equivalent tool.

Documentation :

Able to write clear configuration records, change plans and diagrams that a colleague can follow.

Communication:

Able to explain a technical issue to a non-technical customer contact, in English and ideally in Hindi or Kannada.

Desirable :

• Certification in one or more of: CCNA or CCNP Enterprise / Security, Fortinet NSE 4 or above, JNCIA or JNCIS.
• Exposure to SD-WAN, particularly FortiGate SD-WAN or Cisco Viptela.
• Experience with network access control, RADIUS or Cisco ISE.
• Familiarity with data centre switching, and with structured cabling and rack work.
• Scripting for routine tasks Python, Ansible or similar.
• Experience working to ITIL-style incident, change and problem processes.

Qualifications :

Bachelors degree in Engineering, Computer Science, Information Technology or a related discipline.

Candidates with a diploma and strong demonstrable hands-on experience will also be considered.