Sr. Network Engineer L2(Contract)

Wipro Limited (NYSE: WIT BSE: 507685 NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting design engineering and operations we help clients realize their boldest ambitions and build future-ready sustainable businesses. With over 230000 employees and business partners across 65 countries we deliver on the promise of helping our customers colleagues and communities thrive in an ever-changing world. For additional information visit us at .

Azure Cloud Network Design & Implementation roles

7 years

Location - Bangalore

Project: Azure Network & Connectivity Migration
Role Level:L4 / Senior Network Engineer
Primary Skills:Azure Networking ExpressRoute BGP Hub-and-Spoke Cisco Meraki MX/vMX SD-WAN VPN Azure Firewall Application Gateway/WAF Load Balancing DNS Private Link Network Security & Troubleshooting

Role Summary

Seeking an experiencedL4 / Senior Network Engineerwith strong end-to-end expertise inMicrosoft Azure networking and enterprise network technologies.

The engineer will be responsible fordesigning implementing migrating securing and supporting the Azure network infrastructure includingHub-and-Spoke architecture ExpressRoute VPN connectivity routing Cisco Meraki vMX Azure Firewall Application Gateway/WAF load balancing private connectivity DNS and network monitoring.

The role requires strong hands-on capability in implementing and troubleshooting complexAzure-to-on-premises Azure-to-Azure branch-to-Azure and third-party network connectivity.

Key Responsibilities

• Design implement and supportend-to-end Microsoft Azure network architecture.
• Design and implementAzure Hub-and-Spoke networking architecture.
• Configure and manageVNets subnets address spaces VNet peering NSGs ASGs route tables and User Defined Routes (UDRs).
• Design implement and troubleshootAzure ExpressRouteconnectivity between on-premises/data-center networks and Azure.
• Configure and manageExpressRoute circuits ExpressRoute gateways connections and peering. These are core components documented by Microsoft for ExpressRoute connectivity.
• Strong hands-on knowledge ofBGP routing including route advertisement route propagation filtering and troubleshooting. Azure ExpressRoute uses BGP for dynamic route exchange between on-premises networks and Azure.
• Design and supportExpressRoute resiliency and redundant connectivity.
• Design configure and troubleshootAzure VPN Gateway Site-to-Site VPN and Point-to-Site VPN where required.
• Design and manageAzure Firewall Firewall Policy DNAT/SNAT network rules application rules and network traffic flows.
• Configure and troubleshootAzure Application Gateway WAF Azure Load Balancer and related application connectivity.
• Design and implementAzure Private Link and Private Endpointsfor secure access to Azure services.
• Design and troubleshootAzure DNS Private DNS Zones DNS forwarding and hybrid DNS resolution.
• Design and troubleshoot routing betweenHub Spoke on-premises branch third-party and external networks.
• Understand and troubleshootAzure system routes custom routes/UDRs BGP routes route propagation next-hop selection and asymmetric routing.
• Configure and supportAzure Route Server and Azure Virtual WANwhere required.
• Support migration ofCisco Meraki VPN concentrator infrastructure to Azure-hosted Meraki vMX.
• Configure and troubleshootCisco Meraki MX/vMX AutoVPN SD-WAN and Site-to-Site VPN connectivity.
• Plan and execute network migrations production cutovers rollback procedures and post-migration validations.
• Perform advanced troubleshooting ofnetwork latency packet loss VPN tunnels BGP routing firewall NAT DNS and application connectivity issues.
• UseAzure Network Watcher packet capture connection troubleshooting NSG flow information traceroute and other diagnostic tools.
• Implement appropriatenetwork segmentation and security controlsfor Azure workloads.
• Review Azure network architecture foravailability resiliency security scalability and operational supportability which aligns with Microsofts defined Azure Network Engineer responsibilities.
• Coordinate withMicrosoft Cisco Meraki telecom/service providers security teams application teams server teams DBAs and third-party vendors.
• Prepare and maintainHLD LLD network diagrams IP addressing plans routing documentation migration procedures SOPs change plans and operational handover documentation.
• ProvideL4 escalation support technical leadership RCA and permanent corrective actionsfor critical network incidents.

Mandatory Azure Networking Skills

The candidate should have strong hands-on expertise in:

• Azure Virtual Networks
• Subnets and IP address planning
• Hub-and-Spoke architecture
• VNet Peering
• Azure ExpressRoute
• ExpressRoute Gateway
• ExpressRoute Circuits and Connections
• ExpressRoute Private Peering
• BGP
• Azure VPN Gateway
• Site-to-Site VPN
• Point-to-Site VPN
• Azure Route Tables / UDR
• Azure Firewall / Firewall Policy
• NSG / ASG
• Azure Application Gateway
• Web Application Firewall (WAF)
• Azure Load Balancer
• Azure Private Link
• Private Endpoints
• Azure DNS / Private DNS
• Azure Route Server
• Azure Virtual WAN
• NAT Gateway
• Azure Bastion
• Network Watcher
• Network monitoring and troubleshooting

Microsofts current Azure Network Engineer Associate scope specifically includes core networking hybrid connectivity application delivery private access and network security making these appropriate competency areas for your L4 requirement.

Enterprise Networking Skills

• TCP/IP
• BGP
• OSPF
• Static and dynamic routing
• Route redistribution
• IPSec VPN
• VLANs
• NAT / SNAT / DNAT
• DNS
• DHCP
• Subnetting and IP addressing
• Firewalls
• SD-WAN
• Packet capture and traffic-flow analysis
• High Availability and network resiliency
• Advanced network troubleshooting

Cisco Meraki Skills

• Cisco Meraki MX
• Cisco Meraki vMX in Azure
• Meraki Dashboard
• AutoVPN
• SD-WAN
• Site-to-Site VPN
• VPN Concentrator
• Routing
• Firewall policies
• NAT
• Meraki network troubleshooting

ExpressRoute Expertise Should Be Mandatory

I would explicitly put the following statement in the JD becauseExpressRoute is an important requirement for the role:

Candidate must have hands-on experience in end-to-end Azure ExpressRoute implementation and troubleshooting including ExpressRoute circuit provisioning gateways private peering BGP configuration route advertisement/propagation VNet connectivity redundancy monitoring and troubleshooting hybrid connectivity between on-premises/data-center networks and Microsoft Azure.

Microsofts reference architecture identifies theExpressRoute circuit gateway and connectionas the three main components for connecting an on-premises network to an Azure VNet through ExpressRoute private peering.

L4-Level Expectations

• Independently ownAzure network design and implementation.
• Lead complexnetwork migration and transformation projects.
• Review existing infrastructure and propose target Azure network architecture.
• Create and reviewHLD and LLD.
• LeadExpressRoute and hybrid connectivity implementationwith service providers.
• Lead troubleshooting of complexBGP routing ExpressRoute VPN firewall and connectivity issues.
• Perform network impact and risk assessments before production changes.
• Prepareimplementation migration validation and rollback plans.
• Lead technical bridge calls for critical incidents.
• Provide technical guidance toL2/L3 Network Engineers.
• Coordinate with Microsoft Azure Cisco Meraki ISPs/telcos and security vendors.
• PerformRoot Cause Analysis (RCA)and recommend corrective/preventive actions.

Preferred Certifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-700). Microsoft positions this certification around designing implementing and maintaining Azure networking infrastructure routing hybrid connectivity private access and network security.
• Cisco CCNP Enterpriseor equivalent hands-on experience.
• RelevantCisco Merakinetworking experience/certification.

Mandatory Skills: Azure Network.

Experience: 5-8 Years.

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them we need people inspired by reinvention. Of yourself your career and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.