Network Software Engineering Lead

tata consultancy services asia pacific pte. ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Tata Consultancy Services Asia Pacific Pte. Ltd. invites a Network Software Engineering Lead to join our Singapore team. You will design, build, and manage data networks (LAN/WAN) and cloud infrastructures, leading routing, switching, and security of Meraki, SD-WAN, and Azure networks.

The role requires monitoring of performance, coordinating with vendors, performing upgrades, and incident resolution using Zscaler, Site24x7, and SMAX ITSM. Ten-plus years of experience is preferred.

Qualifications

• Designs, builds, and maintains data communication networks like LANs, WANs, and cloud infrastructures.
• Routing and Switching, radius appliances, Firewall, MERAKI, SDWAN, Azure Network, proxies, accelerators, load balancers, traffic shaper and traffic analyser, application gateways, Security and Monitoring tools like Zscaler, site24x7.

Responsibilities

• Configure, deploy, and manage Cisco routers and switches in LAN/WAN environments for continual service.
• Continuously monitor network performance, availability, and security using Meraki Dashboard and SD-WAN tools.
• Configure and manage Cisco, Meraki devices, SDWAN devices and firmware upgrades during maintenance windows.

Skills

LAN/WAN Networking

Azure Networking

Meraki

SD-WAN

Firewalls

Zscaler

Monitoring tools

SMAX ITSM

Tools

Meraki Dashboard

Cisco IOS

SD-WAN vManage

Azure Firewall

Job description

Role: Network Software Engineering Lead

Required Technical Skill Set: Knowledge on handling L3/L4 activities

No of Requirements: 1

Desired Experience Range: 10 + Years

Desired Competencies (Technical/Behavioral Competency)

Must-Have**

Designs, builds, and maintains data communication networks like LANs, WANs, and cloud infrastructures. Routing and Switching, radius appliances , Firewall, MERAKI, SDWAN, Azure Network, proxies, accelerators, load balancers, traffics shaper and traffic analyser, application gateways , Security and Monitoring tools like Zscaler, site 24x7. ITSM Tools: SMAX

Good-to-Have:

Other Networking flavors

Responsibility of / Expectations from the Role

• Configure, deploy, and manage Cisco routers and switches in LAN/WAN environments for continual service, Cisco, Checkpoint, Fortigate, Palo Alto, Firewall and Azure Firewall.
• Continuously monitor network performance, availability, and security using Meraki Dashboard, Cisco SD-WAN vManage, Cisco, Checkpoint, Fortigate, Palo Alto, firewall and Azure Firewall.
• Configure and manage Cisco, Meraki devices, SDWAN Devices and firmware upgrades, patches, and configuration changes during maintenance windows while ensuring minimal disruption.
• Troubleshooting hardware related issue on Catalyst , Meraki and SDWAN devices
• Work closely with support teams, vendors (Cisco TAC, Meraki support), and service providers for escalations and troubleshooting to maintain a continual Support and service for the Infra
• Identify and resolve SD-WAN path failures, tunnel issues, or policy misconfigurations impacting application performance or site connectivity.
• Validate routing tables, ACLs, VPN configurations, QoS settings, and firewall policies to ensure they are correctly implemented as intended.
• Managing and remediate Meraki device issues, such as AP connectivity problems, switch port errors, or security appliance alerts, through the cloud management platform.
• Leverage Cisco IOS logs, Meraki event logs, SD-WAN troubleshooting dashboards, syslogs, and SNMP traps for in-depth troubleshooting.
• Validate routing tables, ACLs, VPN configurations, QoS settings, and firewall policies to ensure they are correctly implemented as intended.
• Update network documentation and incident logs with troubleshooting steps, resolutions, and lessons learned.
• Recommend upgrades or design changes to minimize common faults or simplify troubleshooting efforts.
• Network Architecture: Design and manage Azure Virtual Networks (VNets), subnets, VNet peering, and hub-and-spoke network topologies
• Hybrid Connectivity: Configure and support Site-to-Site VPNs, Point-to-Site VPNs, and Azure ExpressRoute circuits
• Traffic Management & Load Balancing: Implement Azure Load Balancer, Application Gateway, Azure Front Door, and Traffic Manager
• Security & Governance: Set up Network Security Groups (NSGs), Application Security Groups (ASGs), User Defined Routes (UDR), and Azure Firewall
• Automation & Infrastructure as Code (IaC): Deploy resources using Terraform, Bicep, ARM templates, or PowerShell/Python scripts
• Monitoring & Troubleshooting: Diagnose latency, packet loss, DNS resolution, and connectivity issues using Azure Monitor and Network Watcher
• Firewall Management: Policy Management: Build and update access control lists, network address translation (NAT) rules, and security policies; Network Defense: Monitor logs and network traffic for suspicious events or security threats; Maintenance: Apply software updates, firmware upgrades, and security patches to perimeter devices