Senior Network Administrator

Stellar Innovations; Bengaluru; On-site; INR 900,000 - 1,200,000; Full time

Job summary

Stellar Innovations is seeking a proactive Junior Network Architect (L2) with 3+ years of hands-on enterprise networking experience in Bengaluru. You will bridge day-to-day operations and network architecture, assisting senior architects in evaluating, designing, and optimizing robust enterprise networks across multi-site environments.

Responsibilities include deploying Layer 2/3 switches, NGFWs, VPNs, and wireless deployments, while monitoring health and security using industry tools.

Qualifications

• Core networking concepts including OSI model, TCP/IP, routing protocols (OSPF/BGP).
• Experience in configuring enterprise firewalls and VPNs.
• Knowledge of VLANs, STP, DHCP, DNS, IPAM, and WAN/LAN topologies.

Responsibilities

• Assist Senior Network Architects with LLDs and capacity planning for LAN/WAN/SD-WAN/Wi‑Fi/VPN.
• Stage and configure Layer 2/3 switches, routers, and NGFWs.
• Implement VLANs, trunking, STP, OSPF/BGP, DHCP, DNS, IPAM.
• Collaborate with Cloud and Systems teams for hybrid-cloud integration (AWS/Azure).
• Administer enterprise firewalls, ACLs, NAT, IPS/IDS, SSL inspection, IPsec/VPN.
• L2 escalation for routing issues, latency, and hardware faults.
• Support wireless infrastructure: WLC, APs, SSID security, RF performance.
• Liaise with carriers for circuit turn-up and failover.
• Monitor health with PRTG/Zabbix/SolarWinds; plan firmware updates per ITIL.
• Create topology diagrams, configuration templates, and SOPs.
• Participate in DR drills, VAPT remediation, ISO27001/SOC2 compliance.

Skills

OSPF/BGP

VLANs

Layer 2/3 switching

Firewalls

VPNs

Wi-Fi

Network monitoring

Troubleshooting

Education

Bachelor's in CS/IT

Tools

Cisco Catalyst

Fortinet FortiGate

Palo Alto

Aruba/HPE

Job description

Role & responsibilities

We are looking for a proactive Junior Network Architect (L2) with 3+ years of hands‑on experience in enterprise networking. In this role, you will bridge day‑to‑day operations and network architecture, assisting senior architects in evaluating, designing, and optimizing robust enterprise networks. You will configure and maintain Layer 2/Layer 3 campus networks, secure perimeter firewalls, manage wireless deployments, and provide advanced L2 escalations to ensure 99.9%+ availability and security across our multi‑site environment.

Key Responsibilities

Architecture & Implementation

• Assist Senior Network Architects with low‑level design (LLD), capacity planning, and deployment of enterprise LAN, WAN, SD‑WAN, Wi‑Fi, and VPN topologies.


• Stage, configure, and commission Layer 2 and Layer 3 switches, routers, and next‑generation firewalls (NGFW).


• Implement core protocols and network services including VLANs, trunking, Spanning Tree (RSTP/MSTP), OSPF/BGP, DHCP, DNS, and IPAM.


• Collaborate with Cloud and Systems teams to integrate on‑premises infrastructure with hybrid‑cloud environments (AWS / Azure).

Network Operations & Security

• Administer enterprise firewalls, managing stateful access control lists (ACLs), NAT rules, IPS/IDS profiles, SSL inspection, and IPsec/SSL VPN tunnels.


• Act as an advanced escalation point (L2) for recurring or complex incidents involving routing anomalies, latency, packet loss, and hardware faults.


• Support enterprise wireless infrastructure, including central controllers (WLC), access points, SSID security policies, and RF performance optimization.


• Liaise with telecommunications carriers and ISPs for circuit turn‑up, failover testing, and link outage resolution.


• Proactively monitor network health, bandwidth utilization, and interface errors using tools such as PRTG, Zabbix, or SolarWinds.


• Plan and execute firmware updates, security patching, and scheduled change windows in compliance with ITIL change management procedures.


• Author and maintain high‑quality network topology diagrams (Visio/Lucidchart), configuration templates, and standard operating procedures (SOPs).


• Participate in disaster recovery drills, vulnerability assessments (VAPT remediation), and compliance audits (ISO 27001 / SOC 2).

Required Skills & Qualifications

Core Networking: Strong grasp of the OSI model, TCP/IP stack, dynamic routing (OSPF, basic BGP), Layer 2 switching (VLANs, 802.1Q, LACP, STP), and IP addressing/subnetting.

Firewall Engineering: Hands‑on experience configuring and administering enterprise firewalls (Fortinet FortiGate, Palo Alto, Sophos, or Cisco ASA/Firepower).

Hardware & Platforms

• Proven track record configuring campus‑grade switches and routers (Cisco Catalyst, Aruba/HPE, or equivalent enterprise hardware).

Network Services & Tools

• Practical knowledge of IPsec/SSL VPNs, enterprise Wi‑Fi deployment, packet analysis (Wireshark), and network monitoring platforms.

Problem‑Solving & Communication

• Strong diagnostic reasoning with the ability to lead incident post‑mortems and articulate architectural trade‑offs to cross‑functional engineering teams.

Preferred Qualifications & Certifications

• Education: Bachelors degree in Computer Science, Information Technology, Electronics Engineering, or equivalent practical experience.


• Core Certifications: Cisco Certified Network Associate (CCNA) required; active progress toward Cisco Certified Network Professional (CCNP Enterprise) strongly preferred.


• Security & Vendor Certifications: Fortinet NSE 4+, Palo Alto PCNSA/PCNSE, or Aruba Certified Associate/Professional.


• Modern Networking: Practical exposure to SD‑WAN architectures, network automation (Python, Ansible), or cloud virtual networking (AWS VPCs, Transit Gateways, Azure VNets).


• Process Knowledge: Familiarity with ITIL frameworks, change advisory boards (CAB), and enterprise security hardening guidelines.

Key Points

• 5 Days WFO - Bangalore Location


• Preferred Immediate Joiners