Network Engineer - CCNP *

NAF Technology Services India Private Limited; Chennai; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

NAF Tech in Chennai, India is seeking an experienced Network Engineer to design, implement, and support enterprise networks across multiple locations. The role focuses on SD-WAN, firewall security, VPN connectivity, and high availability.

Ideal candidates have CCNA/CCNP, strong troubleshooting skills, and experience with Cisco, Palo Alto, and Fortinet environments. Collaboration with global teams is key.

Qualifications

• Enterprise network engineering with router and switch configuration
• Firewall management and NAT/ACL implementation
• WAN/ISP and VPN troubleshooting
• Network security policies and runbooks
• Cloud networking (Azure/AWS) concepts
• Network monitoring and incident response

Responsibilities

• Design, implement, and maintain campus and enterprise networks across locations
• Engineer SD-WAN, WLAN, and firewall infrastructure with redundancy
• Document network architecture, policies, and runbooks
• Manage branch connectivity and VPN solutions
• Monitor network health and optimize performance

Skills

CCNA/CCNP

SD-WAN

Firewall

VPN

Wireless Networking

Networking Troubleshooting

Network Monitoring

Education

Bachelor's degree in Computer Science or related field

Tools

Cisco

Palo Alto

Fortinet

Check Point

Sophos

F5

SolarWinds

PRTG

Nagios

Zabbix

Meraki

Job description

Do you love a Challenge? Are you Passionate about technology? Are you customer obsessed? Looking to innovate? Join NAF Tech!

New American Funding (NAF) is a mortgage lender offering an array of loan options. Established in 2003 and headquartered in Tustin, CA, United States,

Network Engineer with 10+ years of experience designing, implementing, securing, and supporting enterprise networks across routing, switching, firewall, wireless, and cloud environments, with a strong focus on modern networking.

Collaborates with business stakeholders, vendors, carriers, and cross-functional global teams to analyze requirements, recommend innovative network solutions, evaluate emerging technologies, and deliver business value. Recognized for attention to detail, adaptability in fast-paced environments, strong communication and teamwork, and adherence to RACI-based responsibilities.

Core Competencies:

• Design, implement, and maintain campus and enterprise networks across multiple locations.
• Engineer routing, switching, SD-WAN, AP & firewall infrastructure with redundancy and high availability.
• Participate in network design, implementation, and lifecycle management.
• Document network architecture, policies, and operational procedures.
• Design and implement SD-WAN architectures connecting branch offices to data center environments over multiple transport types.
• Engineer dual-ISP and multi-link WAN topologies with dynamic path selection, automatic failover, and load balancing.
• Define application-aware traffic policies, including performance-based routing, traffic prioritization, and local internet breakout.
• Deploy and manage branch connectivity through centralized dashboards using SD-WAN, including zero-touch provisioning and template-based configuration.
• Monitor WAN health, latency, jitter, and packet loss to optimize performance and support capacity planning.
• Document SD-WAN designs, policies, and runbooks, and coordinate with ISPs and vendors on rollout and circuit upgrades.

Advanced Routing & Switching (CCNA / CCNP):

• Apply advanced routing and switching concepts: OSPF, BGP, STP, VLANs, HSRP/VRRP.
• Resolve Layer 2 and Layer 3 issues and drive network optimization.
• Provide technical guidance and SME support across the organization.

Firewall & Network Security Engineering:

• Implement and administer enterprise network security infrastructure to safeguard business systems.
• Manage firewall policies, NAT, ACLs, and security rule optimization.
• Perform complex incident troubleshooting and root cause analysis.
• Coordinate with firewall vendors and third-party support teams.

VPN & Secure Connectivity:

• Configure, deploy, and troubleshoot Site-to-Site VPN and Remote Access VPN solutions.
• Enable secure connectivity for remote users and branch offices.
• Work with business and infrastructure teams to maintain secure network access.
• Coordinate with ISPs on new link provisioning and circuit upgrades.
• Design and manage internet redundancy and failover solutions.
• Troubleshoot WAN connectivity issues with service providers and elevate circuit-related outages to vendor support.

Network Policy & Security Governance:

• Develop and maintain network security policies and standards.
• Create and manage firewall rules, access control policies, and network segmentation.
• Ensure compliance with security and operational requirements.
• Own critical and complex network incidents, with deep-dive troubleshooting and RCA.
• Serve as escalation point for Network Operations and Help Desk teams.
• Use monitoring tools to maintain network performance and availability.
• Participate in on-call support and after-hours maintenance activities.

Technical Experience:

Routing, Switching & Firewalls (5+ Years):

Enterprise network engineering covering router and switch configuration, firewall management, NAT and ACL implementation, L3 support, incident resolution, and technologies such as VLANs, STP, HSRP, and VRRP across Cisco, Palo Alto, Fortinet, and Cisco ASA environments.

Network Troubleshooting (4+ Years):

Layer 1-3 troubleshooting, WAN/ISP and VPN connectivity resolution, routing and switching diagnostics, packet-level traffic analysis, and RCA to keep enterprise networks reliable and high-performing.

Wireless Networking (4+ Years):

Cisco Wireless Controllers and Cisco Meraki Wireless, including access point deployment, SSID management, wireless security policy implementation, and Wi‑Fi performance troubleshooting.

Network & Security Architecture:

Enterprise network design, ISP redundancy, high‑availability architecture, firewall security frameworks, network segmentation, branch connectivity, and disaster recovery connectivity planning.

Security Controls & Ecosystem:

Firewall policy management, ACL administration, network segmentation, VPN security, NAT, security rule reviews, IDS/IPS, URL filtering, threat prevention, network access control (NAC), and continuous security monitoring for secure, compliant, resilient environments.

Cisco Routing & Switching, Cisco Meraki SD-WAN/Wireless, Palo Alto, Fortinet, Check Point, Sophos, and F5 Load Balancers, supporting connectivity, security, performance, and high availability.

Azure and AWS networking, including Virtual Networks (VNET), VPN Gateway, ExpressRoute, Site-to-Site connectivity, Security Groups, and cloud firewall architecture.

Packet Capture & Analysis: Wireshark-based capture and analysis, TCP handshake validation, traffic investigation, application flow troubleshooting, and root cause identification for complex issues.

Network Monitoring Tools:

SolarWinds, PRTG, Cisco Prime, Meraki Dashboard, LogicMonitor, Nagios, and Zabbix for availability monitoring, performance optimization, alert management, and capacity planning.

Troubleshooting:

Diagnosing and resolving network outages, routing loops, VPN tunnel failures, firewall traffic drops, ISP circuit issues, wireless connectivity problems, and performance bottlenecks.

Key Skills:

• Firewall Management: Fortinet, Palo Alto, Cisco ASA, Check Point
• Routers & Switches: configuration and troubleshooting
• Routing Protocols: OSPF, BGP
• VPN Technologies: Site-to-Site, Remote Access
• Layer 2 & Layer 3 Troubleshooting
• Network Security Policies & ACL Management
• High Availability & Redundancy
• Network Monitoring & Performance Optimization
• Incident Management & Root Cause Analysis
• Network Documentation & Runbook Creation

Education & Certification

• Bachelor’s degree in Computer Science or a related field.
• CCNA & CCNP in addition to network vendor certifications.
• PCNSA – Palo Alto Networks Certified Network Security Administrator.