Senior Network Engineer

TITLE: Senior Network Engineer

REPORTING To: CoE Network Manager

WORKING LOCATION: Bengaluru

SUMMARY OF ROLE AND OBJECTIVES:

The Infrastructure Lead IT is an intermediate-senior technical contributor within the CoE Network team responsible for end-to-end project delivery execution of complex network initiatives and operational excellence across Eurofins network landscape. This role carries a strong emphasis on project delivery on-time execution and stakeholder management while contributing hands-on technical expertise across multi-vendor network and security platforms.

The engineer will work closely with Level 3 engineers architects and regional teams/IT zones to deliver network projects drive change and support operational escalations in line with ITIL methodology and Eurofins Policies & Procedures (ENNA Eurofins Normalised Network Architecture).

Project Delivery (Primary Focus)

A senior technical resource within the team who can manage complex networks including datacentres.
Own and deliver assigned network infrastructure projects end-to-end from initiation planning design validation execution testing cutover to hyper care and handover.
Drive on-time on-scope and on-quality delivery of global and regional projects including new site build-outs datacentre migrations firewall refresh/migration programs SD-WAN rollouts VoIP integrations WAF deployments and Zero Trust initiatives.
Create and maintain project artefacts: Low-Level Designs (LLDs) High-Level Designs (HLDs) Bill of Materials (BoM) implementation plans rollback plans test plans and Run/Operate documentation.
Coordinate with cross-functional teams (Security Cloud Service Desk Regional IT Vendors ISPs) to remove blockers and ensure milestone adherence.
Provide regular project status updates RAID logs (Risks Assumptions Issues Dependencies) and escalations to the CoE Network Manager and IT Infrastructure leadership.
Contribute to capacity planning lifecycle management and technology refresh roadmaps.

Operations Incident & Change Management
Manage the CoE Network ITSM queue triage troubleshoot and resolve Network Incidents (with focus on P1/P2/P3).
Fulfil Network Service Requests including new device installation configuration changes and documentation updates.
Own and manage Network Changes following Eurofins Change Management Process (RFC creation CAB presentation implementation and post-implementation review).
Participate in Problem Management and SWOT analysis to drive proactive service improvements.
Support technical escalations and elevated support to maintain SLAs.

Standards Documentation & Governance
Contribute to the creation and review of Key Group Documents SOPs Work Instructions and Guidelines aligned with ENNA standards.
Deliver services following ITIL methodology IT Service Cards SOPs/WIs Training and Service Transition.

 
Required Technical Skills

Network Security (Strong Emphasis Multi-Vendor)

Check Point Firewalls & MDSM (Multi-Domain Security Management) policy management VSX clustering upgrades migrations.
Fortinet FortiGate FortiManager FortiAnalyzer SD-WAN features SSL VPN IPSec.
Palo Alto Networks Panorama NGFW features App-ID User-ID GlobalProtect Prisma.
Cisco Secure Firewall (Firepower/FTD/ASA) FMC threat policies migrations from ASA to FTD.
Web Application Firewalls (WAF) hands-on with Cloudflare AWS WAF Azure WAF F5 ASM/Advanced WAF or Imperva.
Cloudflare DNS CDN WAF Zero Trust / Cloudflare Access DDoS protection Magic Transit (desirable).
Experience with DDoS mitigation IPS/IDS TLS inspection and modern Zero Trust / SASE architectures.

 
Routing & Switching

Cisco Catalyst (29xx/3xxx/9xxx) Nexus (5K/7K/9K) ASR ACI (desirable) IOS/IOS-XE/NX-OS.
Juniper switching EX/QFX series Junos OS virtual chassis EVPN-VXLAN (desirable).
HPE/Aruba and Dell switching platforms.
Deep knowledge of Layer 2/3 protocols VLAN STP/RSTP/MSTP LACP OSPF EIGRP BGP MPLS VRF multicast.
Routing convergence optimisation and traffic engineering.

WAN SD-WAN & Connectivity
SD-WAN Arista VeloCloud (primary) with awareness of Cisco Viptela / Versa / Fortinet SD-WAN.
MPLS Internet breakout design hybrid WAN DIA circuits.
VPN technologies IPSec (policy & route-based) SSL VPN Remote Access VPN DMVPN.

Wireless
Cisco Wireless (WLC LAP/CAPWAP Autonomous APs) Cisco Meraki Aruba Aerohive/HiveManager.

Load Balancing & Application Delivery
A10 (preferred) F5 KEMP VIPs SSL offload persistence health monitors iRules/aFleX basics.

Voice & Collaboration
Cisco Call Manager Cisco Unity UCS and cloud-based telephony (RingCentral MS Teams Voice awareness).

Authentication & Access
RADIUS TACACS Cisco ISE/ACS 802.1X NAC fundamentals.

Cloud & Modern Networking
Networking in AWS / GCP / Azure (VPC/VNet Transit Gateway VNet Peering ExpressRoute Direct Connect).
Infrastructure-as-Code familiarity (Terraform Ansible) for network automation.
Monitoring & observability tools SolarWinds PRTG ThousandEyes Splunk.

QoS Traffic Engineering & Tools
QoS queuing traffic shaping policy management.
Packet capture & analysis (Wireshark tcpdump).

Personal Qualities / Profile
Project-focused able to drive tasks to completion under tight deadlines.
Autonomous proactive analytical and rigorous.
Business-focused with strong risk sensitivity.
Excellent coordination skills able to work across individuals teams vendors and geographies.
Strong written and verbal communication.
Comfortable operating in a tightly controlled change-managed environment.

Qualifications :

Qualifications and Experience
University Degree in Information Technology Computer Science Electronics or comparable field or equivalent relevant work experience.
Minimum 68 years of hands-on experience in enterprise networking and security with at least 23 years in a project delivery or lead capacity.
Industry certifications preferred: CCNP (Enterprise/Security) CCSA/CCSE (Check Point) NSE 4/5/6 (Fortinet) PCNSA/PCNSE (Palo Alto) ITIL v4 Foundation; PMP/Prince2 Foundation a plus.
Strong communication skills in English (verbal and written) able to present to technical and business stakeholders.
Proven experience working in geographically diverse multi-vendor enterprise environments.

Remote Work :

No

Employment Type :

Full-time