Manager - Network Engineering (Cloud Networking & Security)

Job Summary:

Designs, builds and operates the airline's network hands-on, with emphasis on AWS cloud networking and network security, while administering the on-prem, and airport network estate.

Role & responsibilities:

Cloud networking and security

• Build and operate AWS networking: VPCs, subnets, routing, Transit Gateway, Direct Connect and Site-to-Site VPN.
• Implement multi-region networking and failover routing for the Mumbai primary and Hyderabad DR regions, including Route 53.
• Configure cloud network security: security groups, NACLs, AWS Network Firewall, WAF, Shield and PrivateLink.
• Write and maintain network configuration as code (Terraform or CloudFormation).

On-prem and airport networking

• Administer firewalls (Sophos XGS and equivalent): policies, NAT, IPS, web filtering, HA and periodic rule-base clean-up.
• Configure and troubleshoot IPSec site-to-site and SSL / remote-access VPNs for HQ, AALA sites, airports and partners.
• Administer switching: VLANs, trunking, inter-VLAN routing, STP, port security, 802.1X and stacking.
• Administer wireless: controllers, access points, SSIDs, RF surveys, WPA3 and guest access.
• Troubleshoot WAN, SD-WAN and ISP links and work with telecom providers to resolve faults.

Operations and compliance

• Act as L3 escalation for network incidents, including on-call P1 response.
• Monitor network health and capacity; tune alerting and act on trends.
• Execute changes through approved change records; maintain diagrams, configuration backups and runbooks.
• Remediate VAPT and audit findings and provide network evidence for ISO 27001 audits.

Skills and Experience

Cloud (essential)

• Hands-on AWS networking: VPC design, Transit Gateway, Direct Connect, Route 53 and load balancers.
• AWS security services: Network Firewall, WAF, Shield, GuardDuty and VPC Flow Logs.
• Terraform or CloudFormation, with Git-based change control.

On-prem (essential)

• Firewall administration on Sophos, Fortinet, Palo Alto or Cisco platforms.
• IPSec (IKEv2) and SSL VPN configuration and troubleshooting, including third-party tunnels.
• Switching and routing on Cisco, Aruba or Juniper: VLANs, OSPF, BGP, STP and 802.1X.
• Enterprise wireless on Cisco, Aruba, Ruckus or Meraki, including RF design.

Working style

• Strong diagnostic skills using packet captures, flow logs and device logs.
• Disciplined documentation and change practice; comfortable in a 24x7 environment

Qualifications and Certifications

• B.E. / B.Tech in Computer Science, IT, Electronics or Telecommunications.
• Required: AWS Certified Advanced Networking Specialty, or AWS Solutions Architect – Associate with equivalent hands-on experience.
• Required: one professional network certification, such as CCNP Enterprise or Security, Sophos Certified Architect, PCNSE or Fortinet NSE 7.
• Preferred: AWS Certified Security – Specialty or CCIE.