Network Security Engineer

Dexian India; Pune District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Dexian India in Pune is seeking an experienced Network Level-2 Engineer to provide advanced operational support for enterprise network infrastructure. You will act as escalation point for L1 teams and handle incidents, changes, and RCA for LAN, WLAN, WAN, SD‑WAN and security components.

The role requires CCNA, hands-on Cisco IOS/NX-OS experience, and proficiency with monitoring tools. You will work 24x7 shifts, on-call, and collaborate with vendors and datacenter teams to ensure high

Qualifications

• Must hold CCNA certification and relevant network engineering experience.
• Experience with L2/L3 switching, routing, and firewall basics.
• Ability to perform RCA and root cause analysis.
• Willingness to work 24x7 shift and on-call for P1/P2 incidents.
• Knowledge of ITIL processes and change management.

Responsibilities

• Handle L2 network incidents, escalated tickets, and service requests within SLAs.
• Perform advanced troubleshooting of switching, routing, wireless, and firewall components.
• Manage network changes under ITIL and perform device upgrades.
• Maintain topology diagrams, IP plans, and configuration standards.
• Provide guidance to junior engineers and coordinate with vendors.

Skills

L2 switching

VLANs

Routing protocols (OSPF/EIGRP/BGP bas

DHCP/DNS/NAT/ACLs

WAN links (MPLS, Internet, LTE backups

Wireless technologies (SSID, RF basics

Cisco IOS/NX-OS

Education

CCNA

CCNP Enterprise or Wireless

ITIL Foundation

Tools

Cisco Prime

DNAC

Aruba AirWave

ServiceNow / Remedy

Job description

The Network Level‑2 (L2) Engineer provides advanced operational support for enterprise network infrastructure, acting as the escalation point for Level‑1 teams. The role focuses on troubleshooting, configuration, incident resolution, change execution, and maintaining high network availability across LAN, WLAN, WAN, SD‑WAN, and security components.

2. Responsibilities

A. Incident & Problem Management

• Handle L2 network incidents, escalated tickets, and service requests within defined SLAs.
• Perform advanced troubleshooting of:
• Switching (L2/L3)
• Routing protocols (EIGRP, OSPF, BGP)
• Wireless access points & controllers
• Firewalls (basic rule and connectivity troubleshooting)
• SD‑WAN overlays and underlay issues
• Conduct root cause analysis (RCA) and provide permanent fixes.
• Engage with vendors (Cisco, Aruba, Fortinet firewall, etc.) for TAC cases when required.

B. Network Operations & Maintenance

• Perform proactive monitoring using tools such as SolarWinds, PRTG, Cisco Prime, DNA Center, or equivalent.
• Analyze recurring alerts, interface failures, and stability issues to prevent outages.
• Manage port activations, VLAN modifications, trunk configuration, switch stacking support, etc.
• Execute device upgrades, patches, and maintenance activities under change management process.

C. Configuration & Change Management

• Prepare and implement standard and normal changes following ITIL processes.
• Deploy network configurations for:
• Switches (Cisco/Aruba/Juniper)
• Routers
• Wireless controllers
• Basic firewall routing/NAT changes
• Validate and test changes, ensuring minimal business impact.
• Maintain configuration backups using tools like RANCID, SolarWinds NCM, or Git-based repositories.

D. Documentation & Reporting

• Maintain network topology diagrams, IP address plans, and configuration standards.
• Update ticket logs, SOPs, KB articles, and RCA reports.
• Provide periodic reports:
• Incident trends
• Network performance metrics
• Change success/failure analysis
• Work closely with:
• L1 support teams
• Security operations teams
• Datacenter/network architecture teams
• ISP/vendor field engineers
• Provide technical guidance to junior engineers and assist in escalation reduction.

3. Skill & Experience Requirements

Technical Skills

• Strong knowledge of:
• L2 switching (STP, RSTP, port security)
• VLANs, trunking, EtherChannel
• Routing protocols (OSPF, EIGRP, BGP basics)
• DHCP, DNS, NAT, ACLs
• WAN links (MPLS, Internet, LTE backups)
• Wireless technologies (SSID, RF basics, controller-based WLAN)
• Hands‑on experience with Cisco IOS/NX‑OS or equivalent platforms.

Tools

• Ticketing: ServiceNow, Remedy, or equivalent
• Configuration tools: Cisco Prime, DNAC, Aruba AirWave

Certifications (Preferred)

• CCNA mandatory
• CCNP Enterprise or Wireless (preferred)
• ITIL Foundation
• Guaranteed adherence to SLA/OLA for incident & service request closure.
• Accurate implementation of approved network changes.
• Weekly/monthly performance & health reports.
• Up‑to‑date documentation and runbooks.
• RCA documents for high‑severity incidents.

5. Work Schedule & Engagement Model

• 24×7 shift support / rotational shifts (as per business requirement).
• On‑call availability for P1/P2 emergencies.