Network Engineer II

Stefanini North America and APAC; Dadri; On-site; INR 1,200,000 - 2,500,000; Full time

Job summary

Stefanini North America and APAC is seeking an experienced L2 Network Engineer to support Cisco ACI fabrics, data-center networking, and enterprise infrastructure. You will troubleshoot ACI tenants, VRFs, EPGs, and interface policies, plus manage L2/L3 connectivity, OSPF/BGP adjacency, and fabric health.

The role requires hands-on experience with APIC, Cisco switches/routers, firewalls, and wireless infrastructure, with a focus on incident response and change management.

Qualifications

• 3-7 years of experience in network engineering, network operations, data-center networking, or infrastructure support.
• At least 2 years of hands-on experience supporting Cisco ACI and APIC.
• Strong understanding of Cisco ACI architecture and its policy-driven operating model.
• Hands-on experience with tenants, VRFs, bridge domains, EPGs, contracts, application profiles, L2Out, and L3Out.
• Strong knowledge of TCP/IP, IPv4, subnetting, VLANs, STP, EtherChannel, HSRP/VRRP, and inter-VLAN routing.
• Working knowledge of OSPF and BGP; EIGRP knowledge is advantageous.
• Hands-on experience troubleshooting Cisco or equivalent switches, routers, firewalls, and wireless infrastructure.
• Experience with network-monitoring tools and ITSM platforms, preferably ServiceNow.

Responsibilities

• Administer and troubleshoot Cisco ACI fabrics using Cisco APIC.
• Support and troubleshoot ACI tenants, VRFs, bridge domains, EPGs, application profiles, contracts, filters, VLAN pools, AEPs, physical domains, and interface policies.
• Troubleshoot endpoint learning, endpoint attachment, EPG communication, contract enforcement, policy deployment, and fabric faults.
• Monitor and troubleshoot ACI fabric health scores, events, faults, interface issues, and node connectivity.
• Support Layer 2 and Layer 3 external connectivity, including L2Out and L3Out.
• Troubleshoot OSPF and BGP adjacency, route advertisement, redistribution, and reachability issues between ACI and external networks.
• Support ACI software upgrades, configuration backups, maintenance activities, validation, and rollback procedures.
• Participate in ACI implementation, migration, standardization, and network-improvement projects.

Skills

Cisco ACI

OSPF

BGP

LAN/WAN

Network monitoring

ServiceNow

Education

Bachelor's degree in CS/IT

Tools

APIC

SolarWinds

Cisco Prime

Job description

Details: We are seeking an experienced L2 Network Engineer with strong expertise in enterprise networking, data-center infrastructure, and Cisco Application Centric Infrastructure (ACI). The selected candidate will provide second-level operational support for Cisco ACI fabrics, routers, switches, firewalls, wireless infrastructure, and related network-management platforms.

Key Responsibilities

Cisco ACI and Data Center Networking

• Administer and troubleshoot Cisco ACI fabrics using Cisco APIC.
• Support and troubleshoot ACI tenants, VRFs, bridge domains, EPGs, application profiles, contracts, filters, VLAN pools, AEPs, physical domains, and interface policies.
• Troubleshoot endpoint learning, endpoint attachment, EPG communication, contract enforcement, policy deployment, and fabric faults.
• Monitor and troubleshoot ACI fabric health scores, events, faults, interface issues, and node connectivity.
• Support Layer 2 and Layer 3 external connectivity, including L2Out and L3Out.
• Troubleshoot OSPF and BGP adjacency, route advertisement, redistribution, and reachability issues between ACI and external networks.
• Support ACI software upgrades, configuration backups, maintenance activities, validation, and rollback procedures.
• Participate in ACI implementation, migration, standardization, and network-improvement projects.
• Provide operational support for ACI Multi-Site or Multi-Pod environments, where applicable.

Enterprise Network Operations

• Provide L2 support for LAN, WAN, datacenter, internet-edge, and wireless network incidents.
• Monitor, manage, and troubleshoot Cisco and Dell switches, routers, wireless controllers, and access points.
• Troubleshoot Layer 2 and Layer 3 technologies, including VLANs, trunking, STP, EtherChannel, HSRP/VRRP, inter-VLAN routing, and device stacking.
• Troubleshoot routing protocols including OSPF, BGP, and EIGRP, based on the network design.
• Perform approved IOS, NX-OS, firmware, and wireless-controller upgrades.
• Perform hardware replacement, device commissioning, configuration restoration, and post-change validation.
• Perform and validate network-device configuration backups and restores using approved tools and procedures.
• Support remote installation, configuration, and troubleshooting of network devices using secure management methods.

Firewall and Network Security

• Provide operational support for Cisco ASA/FTD and, where applicable, Palo Alto or Fortinet firewalls.
• Troubleshoot firewall zones, security rules, NAT, VPN, failover, and traffic-flow issues.
• Support firewall changes in accordance with approved change-management and security procedures.
• Support Cisco ISE authentication and authorization services, including RADIUS and TACACS+ troubleshooting.
• Coordinate with security teams for firewall, access-control, authentication, and policy-related issues.

Incident, Problem, and Change Management

• Resolve L2 incidents within agreed service levels and provide clear, timely technical updates.
• Perform structured troubleshooting and root-cause analysis for recurring or high-impact incidents.
• Execute approved network changes and maintenance activities in accordance with change-management procedures.
• Prepare implementation plans, validation steps, rollback plans, and post-change reports.
• Escalate design-level, high-risk, or unresolved issues to L3 engineering, architecture, or vendor teams.
• Maintain accurate incident, problem, request, and change records in ServiceNow or an equivalent ITSM platform.
• Participate in major incident bridges and provide technical updates to stakeholders when required.

Monitoring and Documentation

• Monitor network availability, utilization, capacity, performance, and fault conditions using Cisco Catalyst Center, SolarWinds, or equivalent tools.
• Review alerts, logs, events, health scores, and performance trends and take appropriate corrective action.
• Maintain network diagrams, configuration standards, standard operating procedures, troubleshooting guides, and knowledge articles.
• Prepare shift handovers, incident reports, post-incident reviews, and operational documentation.
• Ensure that all activities comply with security, audit, access-control, and change-management requirements.

Job Requirements

Required Qualifications and Technical Skills

• 3-7 years of experience in network engineering, network operations, data-center networking, or infrastructure support.
• At least 2 years of hands-on experience supporting Cisco ACI and APIC.
• Strong understanding of Cisco ACI architecture and its policy-driven operating model.
• Hands-on experience with tenants, VRFs, bridge domains, EPGs, contracts, application profiles, L2Out, and L3Out.
• Strong knowledge of TCP/IP, IPv4, subnetting, VLANs, STP, EtherChannel, HSRP/VRRP, and inter-VLAN routing.
• Working experience with OSPF and BGP; EIGRP knowledge is advantageous.
• Hands-on experience troubleshooting Cisco or equivalent switches, routers, firewalls, and wireless infrastructure.
• Working knowledge of Cisco ASA/FTD, Palo Alto, or Fortinet firewalls.
• Experience with network monitoring tools and ITSM platforms, preferably ServiceNow.
• Experience with network-device configuration backup and restoration procedures.
• Ability to work with globally distributed teams and follow formal incident, problem, and change-management processes.
• Bachelor"s degree in computer science, Information Technology, Networking, or a related discipline is preferred but not mandatory where equivalent practical experience is demonstrated.

Preferred Skills And Certifications

• Cisco CCNA certification is preferred.
• Cisco CCNP Enterprise or CCNP Data Center is highly desirable.
• Experience with ACI Multi-Site, Multi-Pod, VMM integration, VMware networking, or hypervisor connectivity.
• Experience with Cisco ISE, Cisco Catalyst Center, Cisco Prime, SolarWinds, or equivalent tools.
• Exposure to AWS, Microsoft Azure, or Google Cloud networking.
• Knowledge of REST APIs, Ansible, Terraform, or other network-automation technologies.
• Experience creating and maintaining network diagrams using Microsoft Visio or equivalent tools.

Soft Skills

• Strong analytical and structured troubleshooting abilities.
• Clear verbal and written communication skills.
• Strong ownership of incidents through resolution or appropriate escalation.
• Ability to work independently and collaboratively with technical and non-technical stakeholders.
• Strong documentation skills and attention to detail.
• Ability to manage multiple priorities in a service-driven environment.
• Calm and professional approach during outages and critical incidents.
• Good customer service and stakeholder-management orientation.
• Willingness to learn new technologies and support continuous improvement.
• Ability to work effectively during US time-zone coverage, rotational shifts, and on-call assignments.

Working Conditions

• This position will be based in Noida or Hyderabad.
• US time-zone support, rotational shifts, weekend maintenance, and occasional on-call support may be required.
• The role may require coordination with global teams, customers, service providers, and technology vendors.
• The engineer must follow all company security, access-control, confidentiality, and change management policies.