Senior Network Engineer

 Hiring for Network Engineer - L3 


24/7 Environment
5 days WFO

Interested candidates : [email removed]
Suneetha- [phone removed]

 

Required Technical Expertise:

• Routing: BGP + OSPF, route redistribution, failover troubleshooting
• WAN/SD-WAN: MPLS, DIA, Fortinet SD-WAN or similar, ISP coordination
• Firewall: Palo Alto policy/NAT/VPN troubleshooting
• Enterprise operations: ServiceNow, CAB, RCA, monitoring, P1/P2 handling
• Strong packet-flow troubleshooting: not just device commands, but end-to-end diagnosis

Good to have:

• VxLAN/EVPN
• Multi-tenancy
• Cloud networking
• Git/CI-CD for network configs
• Advanced automation
• Zero Trust / NAC / microsegmentation
• AIOps integrations

Job Description:

Role Overview
The Network L3 Engineer serves as the senior escalation point for complex network incidents and is responsible for advanced design, architecture, and engineering of the enterprise network infrastructure. This role works closely with the L2 Operations team, vendors, and business stakeholders to ensure network stability, performance, and scalability across all sites and data centers.
Job Responsibilities

• Own and resolve escalated P1/P2 network incidents from the L2 Operations team, providing expert-level diagnosis and root cause analysis (RCA) within defined SLA timelines.
• Lead advanced troubleshooting of SD-WAN, MPLS, DIA, BGP, OSPF, and site-to-site connectivity issues, including failover validation and traffic engineering.
• Design, implement, and maintain enterprise routing and switching architectures -- including BGP peering, OSPF area design, route redistribution, and policy-based routing.
• Architect and manage SD-WAN solutions (e.g., Fortinet) including overlay/underlay design, application-aware routing policies, and SLA-based path selection.
• Lead firewall policy design and management on Palo Alto platforms -- including security zone architecture, NAT policies, URL filtering, threat prevention profiles, and VPN (IPSec/SSL) configuration.
• Perform data center network design and operations -- spine-leaf architecture, VxLAN/EVPN fabric, BGP EVPN control plane, and multi-tenancy configurations.
• Drive network capacity planning and bandwidth optimization across WAN, LAN, and data center interconnects.
• Develop and maintain network architecture documentation, HLD/LLD designs, runbooks, and standard operating procedures (SOPs) in Confluence/SharePoint.
• Lead and review Change Advisory Board (CAB) submissions for major network changes, ensuring risk assessment, rollback plans, and post-change validation.
• Provide technical guidance and mentorship to L2 Operations engineers; conduct knowledge transfer (KT) sessions and peer reviews before implementation.
• Collaborate with the Command Center and L2 teams to define escalation thresholds, alert tuning strategies, and monitoring best practices in LogicMonitor.
• Engage with ISP/vendor teams for circuit-level escalations, SLA enforcement, and service restoration for MPLS, DIA, and MAN circuits.
• Lead network automation initiatives -- develop scripts and playbooks (Python, Ansible) to automate repetitive operational tasks, configuration management, and compliance checks.
• Contribute to IPAM governance -- manage IP address space, subnet allocation, and DHCP/DNS architecture across all sites.
• Participate in on-call rotation and respond to critical network outages with urgency, driving MTTR reduction across the network operations team.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Technology, Electronics & Communication, or a related field.
• 8-12 years of hands-on experience in network engineering or network architecture roles.
• Expert-level knowledge of Layer 3 routing protocols -- BGP (iBGP/eBGP), OSPF, EIGRP, route redistribution, route maps, and prefix-list filtering.
• Deep understanding of Layer 2 technologies -- VLANs, STP/RSTP/MSTP, LACP/Port-Channel, and Ethernet switching fundamentals.
• Hands-on expertise with SD-WAN platforms (Fortinet or equivalent) -- overlay design, application steering, SLA monitoring, and failover validation.
• Strong experience with Palo Alto firewalls -- security policy design, NAT, Panorama management, VPN (IPSec/SSL), and threat prevention.
• Proven experience with MPLS, DIA, and WAN circuit architecture, troubleshooting, and ISP coordination.
• Hands-on experience with data center networking -- spine-leaf architecture, VxLAN/EVPN, BGP EVPN, and multi-tenant network design.
• Proficiency in network monitoring and observability tools -- LogicMonitor, SolarWinds, PRTG, or equivalent; including alert configuration and dashboard management.
• Strong experience with ServiceNow or similar ITSM platforms for incident, change, problem, and CMDB management.
• Working knowledge of DHCP, DNS, and IPAM tools and architecture.
• Experience with network automation and scripting -- Python, Ansible, or shell scripting for configuration management and operational tasks.
• Strong analytical and troubleshooting skills with the ability to lead resolution under pressure during major outages.
• Excellent written and verbal communication skills in English; ability to produce clear technical documentation and present to stakeholders.

Preferred Qualifications

• Industry certifications: CCNP, CCIE (Routing & Switching or Enterprise), or equivalent.
• Experience with Fortinet NSE 4/5/7 or Palo Alto PCNSE certification.
• Familiarity with LogicMonitor advanced alert configuration, NOC dashboards, and AIOps integrations.
• Experience working in a 24x7 enterprise NOC or network operations environment.
• Exposure to network security frameworks -- Zero Trust architecture, microsegmentation, and network access control (NAC).
• Knowledge of ITIL framework and best practices; ITIL Foundation certification preferred.
• Experience with cloud networking -- AWS VPC, Azure VNet, Direct Connect, or ExpressRoute.
• Familiarity with DevOps/NetDevOps practices -- Git, CI/CD pipelines for network configuration management.