Network Firewall_Hyderabad

Job Description Network Tower Lead

Primary SME Specializations

Profiles may be shortlisted in one or more of the following areas:

LAN and Routing/Switching

• Cisco or Juniper enterprise switching
• VLANs and segmentation
• STP, routing and redundancy
• QoS and high availability
• Campus and data-centre networking

Wireless LAN

• Wireless controllers and access points
• RF fundamentals and 802.11 standards
• Roaming and mobility
• Coverage and performance optimization
• Wireless security and assurance

Firewall and VPN

• Cisco, Fortinet or equivalent firewall platforms
• Firewall policies, ACLs and NAT
• IPsec and SSL VPN
• Remote-access VPN
• IPS and malware protection

Network Access Control

• Aruba ClearPass, Cisco ISE or equivalent
• 802.1X and RADIUS
• EAP-TLS and certificate authentication
• Device posture and profiling
• Guest and contractor access

DDI

• DNS, DHCP and IP address management
• Infoblox or comparable platforms
• High availability and replication
• Network discovery
• Address-space governance

Monitoring and Automation

• Network monitoring and telemetry
• Packet capture and protocol analysis
• Configuration compliance
• REST APIs
• Python and Ansible
• Workflow and health-check automation

Key Responsibilities

• Act as the L3 technical authority for assigned network technologies.
• Resolve complex incidents and service requests within agreed targets.
• Lead technical diagnosis and service recovery during major incidents.
• Use logs, packet captures, telemetry, topology and configuration analysis to isolate faults.
• Perform root-cause analysis and recommend permanent corrective actions.
• Create problem records, known-error documentation and preventive actions.
• Design, configure, test and implement complex network changes.
• Prepare: 
• Impact assessments
• Implementation plans
• Validation steps
• Test plans
• Backout plans
• Prepare and review HLDs, LLDs, SOPs, runbooks and as-built documentation.
• Monitor availability, performance, capacity and threshold exceptions.
• Recommend network tuning, resilience and optimization measures.
• Administer applicable technologies covering: 
• LAN and WLAN
• Routing and switching
• Firewalls and VPN
• NAC
• DDI
• Configuration backups
• Support firmware and software upgrades.
• Perform vulnerability remediation and device hardening.
• Support hardware replacement, RMA and EOL/EOS remediation.
• Maintain accurate CMDB records, configurations, topology diagrams and audit evidence.
• Coordinate with OEMs, carriers, security, cloud, hosting, onsite and application teams.
• Participate in transition, migration, cutover, hypercare and stabilization activities.
• Mentor L1 and L2 engineers.
• Conduct technical knowledge sessions and improve troubleshooting playbooks.
• Develop automation for: 
• Health checks
• Configuration deployment
• Compliance validation
• Operational reporting
• Repetitive support tasks
• Participate in on-call support and planned maintenance windows.

Mandatory Technical Skills

• Expert knowledge of: 
• TCP/IP
• Subnetting
• VLANs
• STP/RSTP/MST
• HSRP/VRRP
• OSPF
• BGP
• Deep production-level expertise in at least one SME specialization.
• Working understanding of dependencies across LAN, WLAN, firewall, VPN, NAC and DDI.
• Experience with high availability, redundancy, failover, segmentation and QoS.
• Strong troubleshooting capability using: 
• Wireshark
• CLI diagnostics
• SNMP
• Syslog
• NetFlow/IPFIX
• Monitoring dashboards
• Experience with ServiceNow or an equivalent ITSM platform.
• Strong understanding of Incident, Problem and Change Management.
• Working knowledge of Python, Ansible, REST APIs or comparable automation tools is preferred.
• Awareness of cloud networking, SD-WAN, SASE and Zero Trust principles.
• Ability to independently execute complex production changes.