Network Lead

C3iHub, IIT Kanpur; Kanpur; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

C3iHub, IIT Kanpur is seeking a Network Security Engineer to design, operate and optimize enterprise network infrastructure across multiple sites, including firewalls, switches, routers and wireless systems. The role requires deep expertise in routing, switching and network security, with the ability to lead complex initiatives and ensure high availability and security in hybrid enterprise environments.

Applicants should have 9–12 years of relevant experience and a bachelor's degree in

Qualifications

• Bachelor's degree in engineering/technology or equivalent.
• 9–12 years of enterprise network and network security management experience.
• Experience in architecture design, implementation, troubleshooting, and optimization of large-scale networks.

Responsibilities

• Provide day-to-day operational support for enterprise network infrastructure across multiple locations.
• Manage LAN/WAN, VLANs, routing paths, and configurations.
• Deploy, configure, maintain, and optimize firewalls, routers, switches, and wireless infrastructure.
• Monitor performance, uptime, and device health; manage inventory and lifecycle of assets.
• Lead upgrades, migrations, and optimization initiatives; act as escalation point for incidents.

Skills

Routing & Switching

Network Security

L3/L2 Troubleshooting

ACLs and IPS

Cloud Networking

Python/Ansible (Automation)

Wired/Wireless Networking

DMZ/Firewall Administration

Documentation & Diagrams

Network Monitoring

Education

Bachelor's Degree in Engineering/Technology

Tools

MS Visio

Wireshark

Nmap

Job description

Role Summary

The Network Security Engineer will be responsible for managing, monitoring, troubleshooting, designing, and optimizing enterprise network infrastructure, including firewalls, switches, routers, wireless systems, and network security solutions. The role requires deep expertise in routing & switching, network security, architecture design, and integration with enterprise services. The ideal candidate should be capable of leading complex network initiatives, handling critical escalations, and ensuring high availability and security across enterprise environments.

Key Responsibilities

Network Operations & Support

• Provide day-to-day operational support for enterprise network infrastructure across multiple locations.
• Understand and manage complete network topology, including LAN/WAN, VLANs, routing paths, and configurations.
• Deploy, configure, maintain, and optimize network devices including firewalls, routers, switches, and wireless infrastructure.
• Monitor network performance (bandwidth, uptime, device health, traffic patterns).
• Maintain inventory and lifecycle management of network assets.
• Lead network infrastructure upgrades, migrations, and optimization initiatives.
• Act as the escalation point for complex network incidents and critical outages.

Security & Compliance

• Configure and manage network security devices ensuring confidentiality, integrity, and availability.
• Implement segmentation, ACLs, intrusion prevention, and access control policies.
• Apply system hardening standards and ensure compliance with security benchmarks (e.g., STIGs).
• Monitor and analyze logs for security incidents and unusual activities.
• Enforce identity-based access control, authentication, and authorization mechanisms.
• Design and review network security architectures and security controls.

Troubleshooting & Incident Management

• Perform L2-L3 troubleshooting for connectivity, performance, and access issues.
• Diagnose network faults using logs, monitoring tools, packet captures, and CLI-based analysis.
• Identify and resolve issues related to routing, switching, security controls, and access management.
• Lead Root Cause Analysis (RCA) activities for major incidents.
• Handle hardware faults and ensure timely issue resolution through proper escalation.

Integration & Coordination

• Integrate network devices with enterprise services such as DNS, DHCP, AD, Syslog, SNMP, and NTP.
• Coordinate with ISPs, OEM vendors, and internal teams for issue resolution.
• Support secure remote access and site connectivity solutions (VPN, IPSEC, SSL VPN).
• Collaborate with cloud, security, and infrastructure teams to support hybrid environments.

Infrastructure & Optimization

• Ensure high availability through redundancy, failover mechanisms, and resilient design.
• Perform upgrades, patching, and preventive maintenance activities.
• Support hybrid/cloud/on-prem data center environments.
• Use centralized monitoring and automation tools for performance tracking and configuration management.
• Evaluate and recommend new networking and security technologies.

Mandatory Technical Skills

Routing & Switching: VLAN, STP, EtherChannel, SVI, OSPF, EIGRP, BGP, MPLS, FHRP, Static & Dynamic Routing

Security: ACL, Wireshark, Nmap, AAA, SSH, IPSEC, GRE, VPN, SSL VPN, NGFW (Palo Alto, Fortinet, Check Point, Cisco Firepower)

Networking Concepts: LAN/WAN, SD-WAN, QoS, Ring/Bus/Hub/P2P/ILL Topologies

Wireless: WLC, Access Points, 4G/5G, Meraki, Aruba

Cloud & Automation: AWS/Azure/GCP Networking, Python, Ansible (Preferred)

Tools: Network diagramming (MS Visio)

Eligibility Criteria

Education: Bachelor's Degree in Engineering/Technology or equivalent

Experience: 9-12 years of experience in enterprise network and network security management, including architecture design, implementation, troubleshooting, and optimization of large-scale enterprise networks.

Preferred Qualifications

• CCNP Enterprise
• CCNP Security
• PCNSE
• NSE 4/5/6/7
• CCIE (Preferred)
• CompTIA Security+
• CISSP (Preferred)
• Exposure to automation tools and configuration management systems
• Experience with SD-WAN, cloud networking, and network automation

Travel:

As and when required, across the country for project execution and monitoring as well as for coordination with geographically distributed teams.