Network Security Architect

Cloudxtreme; Hyderabad, Pune District, Bengaluru; Hybrid; INR 1,500,000 - 2,500,000; Full time

Job summary

Cloudxtreme in Hyderabad, India seeks an experienced Network Architect (8+ years) to design and implement scalable SD-WAN solutions. You will lead deployment of Cisco SD-WAN appliances, configure controllers, and enforce routing policies, QoS, and security across the WAN.

Strong expertise in MPLS/BGP, IPv6, and data center networking is essential. Candidate should excel in complex environments, coordinate with cross-functional teams, and optimize connectivity with WAN optimization technologies.

Qualifications

• 8 years of relevant experience in SD-WAN and large-scale networks.
• Deep understanding of SD-WAN technology including design, implementation and troubleshooting.
• Experience deploying Cisco SD-WAN appliances and controllers.

Responsibilities

• Develop scalable and resilient SD-WAN architectures to optimize network performance.
• Lead the deployment and configuration of Cisco SD-WAN appliances and controllers.
• Implement routing policies, QoS, and security measures within the SD-WAN infrastructure.
• Manage switches/routers/load balancers/WAN optimizers in complex networks.
• Apply advanced routing, switching, WAN optimization and load-balancing techniques.

Skills

SD-WAN design

Cisco SD-WAN

QoS & security in SD-WAN

TLOC & DIA traffic

Network architecture

MPLS/BGP WAN design

Routing protocols (BGP, EIGRP, OSPF)

IPv6 planning

Wi-Fi & wireless networks

WAN optimization concepts

Tools

Cisco Nexus 7000

Nexus 1000V

OTV

Riverbed SteelHead

BIG-IP LTM/GTM

F5 BIG-IP

Load balancers

WAN controllers

Job description

Relevant Yrs. of experience: 8 years is a must

Mandatory skills

• Deep understanding SDWAN technology ,involving design, implementation and troubleshooting Experience.
• Develop scalable and resilient SD-WAN architectures to optimize network performance.
• Lead the deployment and configuration of Cisco SD-WAN appliances and controllers.
• Implement routing policies, quality of service (QoS), and security measures within the SD-WAN infrastructure.
• Better understanding of TLOC configuration and DIA traffic flow.

Network Architect LAN/WAN/WIRELESS/ACI/SDWAN

• Design, deploy, and manage ACI fabrics.
• Understanding of IPv4 & IPv6 IP address planning and implementations.
• Expertise in Routing and switching protocols BGP, EIGRP, OSPF,HSRP,VRRP,LDP,RSVP, STP, RSTP, MSTP, Multicast, Policy based routing
• TCP/IP packet analysis
• Experience in complex MPLS/BGP WAN design and implementation
• Data Center Virtualization-Architecture and Design Capabilities,Product Expertise in CISCO NEXUS 7000, 1000V, OTV,Consolidated I/O, Fibre Channel
• Understanding on Managing Switches/Routers/Load blanacers/WAN Optimizers.
• Advanced Knowledge of Routing, Switching,WAN Optimization and Load balalncing
• Understanding of advanced network technologies and solutions including IPv6, MPLs, BGP, EIGRP, OSPF, HSRP, multicast, policy-based routing, ether-channel, QoS, traffic-shaping, Load balancing, VPN tunnels, WAN Optimization.
• Clear understanding of 802.11a/b/g/n Wi-Fi standards and related components
• Excellent Knowledge on Wireless Controller and Access Points implementation and troubleshooting including setup/configure wireless network (controller / Access points)
• Design, plan, establish, and optimize wireless networks.
• Develop wireless network infrastructures and make recommendations on systems enhancements for optimization.
• Knowledge of Cisco Nexus 5k,7k and 9k and Riverbed steelhead CX,DX and EX series.
• Experties in BIGIP F5 (LTM and GTM)
• Load Balancing, including priority group activation and connection limits. Persistence concepts
• BIG-IP GTM: Global Traffic Manager - Installation and Licensing, Accelerated and Intellegent DNS Resolutions, LDNS Probes and Metrics, DNSSEC, iRules, Synchronization, DNS Integration, iHealth
• BIG-IP LTM: Local Traffic Manager - licensing, provisioning, network configuration, local traffic configuration, Dynamic load balancing methods, Traffic processing through virtual servers/ SNATs, Configuring high availability, Traffic behavior modifications with profiles
• Advanced BIG-IP LTM configurations - VLAN tagging and trunking, SNMP features and packet filters
• Configure Cisco Nexus 7k 5k series
• Configure ASA firewalls, Cisco Next-Gen firewalls experience, MPLS, F5 expertise.