Network Engineer

PwC; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

PwC seeks a skilled Network Engineer to design, implement, and maintain enterprise network infrastructure across LAN, WAN, wireless, and perimeter security domains.

The role emphasizes high availability, performance, and security with exposure to routers, switches, wireless controllers, and firewalls in a large corporate environment.

Qualifications

• Bachelor’s degree in CS/IT or related field.
• 4+ years of enterprise network administration/engineering.
• Strong routing protocols and switching knowledge.
• Experience with Cisco/Aruba/Meraki wireless platforms.
• Firewall platforms experience (Palo Alto/Fortinet/Check Point).
• ITIL knowledge considered a plus.

Responsibilities

• Design, deploy, and manage enterprise routers across LAN/WAN and SD-WAN.
• Configure OSPF, EIGRP, and BGP for optimal routing.
• Manage WAN connectivity including MPLS and SD‑WAN overlays.
• Deploy switches with VLANs, STP, LACP, and security features.
• Deploy wireless APs/controllers and RF planning.
• Implement firewall rules and perimeter security.
• Collaborate with security, server, and cloud teams.
• Lead incident response and root cause analysis.

Skills

Routing protocols

OSPF/BGP/EIGRP

WLAN planning

Firewall administration

Network security

Automation (Python)

Education

Bachelor’s degree in CS/IT/Network Engineering

Tools

Cisco IOS

Juniper JUNOS

SD-WAN

Palo Alto

Fortinet

Check Point

NAC

Job description

Network Engineer

We are seeking a highly skilled Network Engineer with deep expertise in Routers, Switches, Wireless Access Points, Wireless Controllers, and Firewalls to design, implement, and maintain enterprise network infrastructure. This role is responsible for ensuring high availability, performance, and security of the organizations network fabric across LAN, WAN, wireless, and perimeter security domains, supporting business continuity and enabling seamless connectivity.

Responsibilities

Router Administration & WAN Management

• Design, deploy, and manage enterprise routers (Cisco, Juniper, or equivalent) across LAN, WAN, and SD-WAN environments
• Configure and maintain dynamic routing protocols including OSPF, EIGRP, and BGP for optimal path selection and redundancy
• Manage WAN connectivity including MPLS, leased lines, broadband, and SD-WAN overlays
• Implement and maintain QoS policies to prioritize business-critical traffic across WAN links
• Perform router hardening, IOS/firmware upgrades, and lifecycle management
• Troubleshoot routing issues, packet loss, and latency affecting network performance and application availability

Switch Administration & LAN Management

• Deploy, configure, and administer enterprise-grade switches (Cisco Catalyst, Nexus, or equivalent) in access, distribution, and core layers
• Design and manage VLAN architecture, trunking (802.1Q), and inter-VLAN routing to support network segmentation
• Configure and maintain spanning tree protocols (STP, RSTP, MSTP) to prevent loops and ensure redundancy
• Implement link aggregation (LACP/PAGP), port security, and storm control across the switching infrastructure
• Perform switch stack management, firmware upgrades, and hardware lifecycle activities
• Monitor switch performance, port utilization, and MAC address tables to proactively identify and resolve issues

Wireless Access Point Deployment & Management

• Deploy, configure, and manage enterprise Wireless Access Points (Cisco, Aruba, Meraki, or equivalent) across campus, branch, and remote sites
• Perform RF site surveys, channel planning, and transmit power optimization to ensure seamless wireless coverage
• Configure SSIDs, band steering, roaming policies (802.11r/k/v), and QoS for wireless clients
• Monitor AP health, client association metrics, and interference sources to maintain optimal wireless performance
• Perform firmware upgrades, configuration audits, and hardware replacement for access point lifecycle management
• Support high-density wireless deployments for conference rooms, auditoriums, and open-plan office environments

Wireless Controller Administration

• Administer and manage centralized Wireless LAN Controllers (WLC) and cloud-managed wireless platforms (Cisco WLC, Aruba Mobility Controller, or equivalent)
• Configure and maintain controller-based policies for mobility, roaming, load balancing, and client exclusion
• Manage WLAN profiles, RF groups, mobility groups, and guest access portals across controller clusters
• Implement and maintain wireless security policies including WPA3, 802.1X/EAP, certificate-based authentication, and NAC integration
• Perform controller software upgrades, redundancy failover testing, and disaster recovery validation
• Integrate wireless controllers with AAA platforms (RADIUS/TACACS+) and network management systems for centralized visibility

Firewall & Perimeter Security Administration

• Design, implement, and manage enterprise firewalls (Cisco ASA/FTD, Palo Alto, Fortinet, Check Point, or equivalent) for perimeter and internal segmentation
• Create and maintain firewall rule sets, security zones, NAT policies, and application-layer inspection policies
• Manage VPN configurations including site-to-site IPSec VPN and remote access VPN (SSL/TLS) for secure connectivity
• Implement and maintain Intrusion Prevention System (IPS) policies, URL filtering, and threat intelligence feeds
• Conduct periodic firewall rule base reviews, policy optimization, and compliance audits
• Respond to security events flagged by firewall logs, and coordinate with the SOC team for threat investigation and remediation

Cross-Functional Responsibilities

• Collaborate with security, server, cloud, and application teams to support end-to-end infrastructure initiatives
• Participate in architecture and design reviews for network modernization, data center, and cloud connectivity projects
• Establish and maintain network monitoring, alerting, and capacity planning using tools such as SolarWinds, PRTG, Grafana, or equivalent
• Lead network incident response, root cause analysis, and post-incident reviews to prevent recurrence
• Manage network change management processes in compliance with ITIL practices, ensuring minimal business disruption
• Document network topology, IP address management (IPAM), configuration standards, and operational runbooks
• Drive automation of repetitive network tasks using Python, Ansible, or network automation frameworks (Netmiko, NAPALM)
• Provide Tier 2/3 support and participate in on-call rotation for critical network incidents

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related field preferred
• Minimum of 4 years of hands‑on experience in enterprise network administration and engineering
• Strong proficiency in routing protocols (OSPF, BGP, EIGRP) and switching technologies (VLANs, STP, LACP)
• Proven experience with enterprise wireless platforms (Cisco, Aruba, or Meraki) including controller and AP management
• Hands‑on expertise with enterprise firewall platforms (Palo Alto, Fortinet, Cisco FTD, or Check Point)
• Experience with network security standards including 802.1X, WPA3, IPSec VPN, and SSL/TLS VPN
• Familiarity with network automation tools and scripting (Python, Ansible, Netmiko, or NAPALM)
• Strong working knowledge of ITIL principles and ITSM practices
• Industry certifications preferred: CCNA / CCNP, PCNSE, NSE 4+, Aruba ACMP, or equivalent
• Current understanding of industry trends including SD‑WAN, SASE, Zero Trust Networking, and cloud networking
• Outstanding verbal and written communication skills with strong attention to detail
• Excellent analytical and troubleshooting skills with ability to work under pressure during critical incidents
• Strong interpersonal skills and ability to collaborate effectively across technical and business teams