Overview

The L2/ L3 Network & Security Engineer is the ultimate technical authority for our enterprise network architecture and security perimeter. This role is responsible for designing, deploying, securing, and optimizing high-availability network infrastructures that connect our corporate headquarters, data centers, cloud environments, and manufacturing plant floors. The ideal candidate will handle P0/P1 network escalation, lead complex network modernization projects, enforce network segmentation between IT and OT (Operational Technology) networks, and mentor L1/L2 engineering teams.

Job Description

Key Responsibilities

• Network Architecture & Engineering: Design, implement, and maintain enterprise routing, switching, and wireless infrastructures across multi-site environments. Optimize LAN, WAN, Wi-Fi, and SD-WAN networks.
• Perimeter Defense & Security: Administer and harden Next-Generation Firewalls (NGFW). Design, configure, and maintain secure site-to-site IPsec VPNs, remote access VPNs, and Network Access Control (NAC) solutions.
• Network Isolation & OT Security: Implement strict network micro-segmentation using firewalls, DMZs, and access control lists (ACLs) to securely isolate plant-floor manufacturing automation networks from corporate IT networks.
• L3 Escalation & RCA: Act as the highest escalation point for critical network outages. Troubleshoot complex routing loop issues, packet drops, or security breaches, performing deep packet analysis (e.g., Wireshark) and delivering Root Cause Analysis (RCA) reports.
• Core Network Services: Own and manage enterprise network services including DNS architectures, DHCP scopes, RADIUS/TACACS+ for network authentication, and load balancers.
• Project & Vendor Management: Lead complex network upgrade projects (bandwidth expansion, core switch stacking, hardware refresh). Coordinate with ISPs, network OEMs, and telecom vendors to ensure zero-downtime cutovers.
• Governance & Documentation: Draft and maintain highly accurate network topology maps (Visio), business continuity/Disaster Recovery (DR) frameworks, and technical SOPs. Mentor L1/L2 engineers to build baseline network troubleshooting skills.

Technical Skills Required

• Routing & Switching: Deep expertise in BGP, OSPF, STP, HSRP/VRRP, VLANs, Link Aggregation, SVL, STP etc. (Cisco, Fortinet, Aruba, or equivalent).
• Firewall & Security Administration: Advanced hands-on experience with enterprise firewalls (e.g., FortiGate, Palo Alto, Sonicwall).
• SD-WAN & Cloud Connectivity: Hands-on experience deploying and managing SD-WAN fabrics and secure cloud-connect architecture (AWS/Azure ExpressRoute/VPNs).
• Wireless Networks: Enterprise-grade Wi-Fi site planning, heat mapping, and centralized Wireless LAN Controller (WLC) configuration.

Qualifications & Preferred Certifications

• Education: B.E. / B.Tech / BCA / MCA / B.Sc. IT.(Any Graduates)
• Certifications ( Preferred): CCNA/CCNP, Sonicwall Certifications.

Skills & Requirements

Apply Now