Network Engineer

Bellatrix Aerospace; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Bellatrix Aerospace in Bengaluru seeks an experienced Network Engineer to own traffic movement, perimeter policy, and authentication infrastructure. You will manage FortiGate firewalls, switching, and wireless services across sites, ensuring uptime and secure access for devices via EAP-TLS.

You will coordinate PKI lifecycles, maintain documentation, and implement network segmentation changes after CISCO approval, with a focus on scalable, reliable connectivity.

Qualifications

• 3–5 years in network engineering or network administration.
• Hands-on FortiGate administration experience.
• Enterprise switching experience with VLAN segmentation.
• Exposure to RADIUS/802.1X authentication is a strong plus.

Responsibilities

• Manage switch configuration, port security, and VLAN segmentation across sites.
• Manage wireless network infrastructure: SSIDs, WLAN controllers, coverage, and capacity planning.
• Administer FortiGate firewall: rule-base, NAT, VPN, site-to-site connectivity.
• Own DNS/DHCP infrastructure and IPAM, plus traffic monitoring and bandwidth management.
• Administer the NPS server for 802.1X/EAP-TLS authentication and PKI lifecycle.
• Coordinate with Security on network segmentation changes after CIS0 approval.
• Maintain uptime monitoring and lead incident response for connectivity issues.
• Maintain change documentation and rollback plans for network/firewall changes.

Skills

Enterprise switching

VLANs

WPA2/WPA3-Enterprise

RADIUS/802.1X

DNS/DHCP/IPAM

Network monitoring

Wireshark

Change documentation

Networking concepts (OSPF/BGP)

Tools

FortiGate

NPS server

Wireshark

Job description

The Network Engineer owns everything that moves traffic and enforces perimeter policy: switches, VLANs, wireless, the FortiGate firewall, and the NPS server that authenticates devices onto the network via EAP-TLS.

About the Role

Key Responsibilities

Switching & Wireless

• Manage switch configuration, port security, and VLAN segmentation across sites.
• Manage wireless network infrastructure: SSIDs, WLAN controllers, coverage, and capacity planning.
• Maintain network topology documentation and IP address management (IPAM).

Firewall & Perimeter

• Administer the FortiGate firewall(s): rule-base management, NAT, VPN gateway configuration, and site-to-site connectivity.
• Manage remote-access VPN and review firewall rule-change.
• Own DNS/DHCP infrastructure and network-level traffic monitoring and bandwidth management.

Network Access Control

• Administer the NPS server for EAP-TLS network authentication (802.1X) for wired and wireless clients, including certificate-based client authentication policy.
• Coordinate with the Senior IT Admin on the certificate/PKI lifecycle (AD Certificate Services) that backs EAP-TLS.
• Propose network segmentation and architecture changes, implementing them once approved by the CISO.
• Own network uptime/performance monitoring and lead the technical response to connectivity incidents.
• Maintain change documentation and rollback plans for all network and firewall changes.

Qualifications

3–5 years in network engineering or network administration, with hands-on FortiGate (or equivalent next-generation firewall) administration and enterprise switching experience. Exposure to RADIUS/802.1X network authentication is a strong plus.

Required Skills

• Enterprise switching & VLANs — 802.1Q trunking, spanning tree, port security.
• Wireless networking — WPA2/3-Enterprise, RF planning.
• RADIUS/NPS and 802.1X/EAP-TLS network authentication, certificate-based auth concepts.
• DNS/DHCP, IPAM, and routing fundamentals (static routing, OSPF/BGP as applicable).
• Network monitoring/observability tooling and packet-capture troubleshooting (Wireshark).
• Change documentation and network architecture diagramming.

Preferred Skills

• Fortinet NSE 5–7, Cisco CCNP, CompTIA Network+, Certified Wireless Network Administrator (CWNA).