Job Description:
Key Responsibilities:
1. Design, implement, and manage Enterprise LAN, WAN, WLAN, SD-WAN, and Data Center networks.
2. Administer and troubleshoot multi-vendor security infrastructure including Array Load Balancer, FortiGate, Sophos, and SonicWall Firewalls.
3. Manage and optimize DMZ infrastructure for Internet-facing applications and services.
4. Configure and maintain Array Load Balancers including VIPs, Server Pools, SSL Offloading, Health Checks, Content Switching, Persistence, and High Availability.
5. Design, implement, and troubleshoot Layer 2 and Layer 3 networking protocols including VLANs, STP, OSPF, BGP, VRRP, and Static Routing.
6. Configure and manage Firewall Security Policies, NAT, VPNs, IPS/IDS, Web Filtering, Application Control, and Threat Protection.
7. Manage Site-to-Site VPNs, IPsec VPNs, SSL VPNs, and Remote Access VPN solutions.
8. Configure and maintain Fortinet Wireless Infrastructure (FortiAP), including SSIDs, Guest Networks, Captive Portals, and Wireless Security Policies.
9. Design and implement network segmentation between Internal, DMZ, Cloud, and External Networks.
10. Troubleshoot complex network, security, and application connectivity issues across on-premises and cloud environments.
11. Monitor network availability, performance, and security events using enterprise monitoring tools.
12. Perform firmware upgrades, patch management, backup, and disaster recovery activities for network and security devices.
13. Create and maintain network diagrams, SOPs, HLDs, LLDs, and operational documentation.
14. Participate in security audits, vulnerability assessments, compliance reviews, and remediation activities.
15. Coordinate with application, cloud, infrastructure, and security teams for project implementations and incident resolution.
16. Lead Root Cause Analysis (RCA) activities for critical incidents and service disruptions.
17. Azure & AWS Networking Responsibilities
18. Design, implement, and manage Azure and AWS network architectures.
19. Configure and manage Azure Virtual Networks (VNet), Subnets, NSGs, Route Tables, Private Endpoints, and Azure Firewall.
20. Configure and manage AWS VPCs, Security Groups, NACLs, Route Tables, Transit Gateway, and Internet Gateways.
21. Implement hybrid connectivity between On-Premises Data Centers and Azure/AWS using VPN and ExpressRoute/Direct Connect.
22. Manage Azure Load Balancers, Application Gateway, AWS Application Load Balancer (ALB), Network Load Balancer (NLB), and Gateway Load Balancer.
23. Configure cloud-based DMZ and secure Internet-facing workloads.
24. Troubleshoot connectivity issues between On-Premises, Azure, and AWS environments.
25. Support cloud migration projects and cloud network security initiatives.
26. Implement cloud security best practices, segmentation, and access control policies.
27. Manage DNS, routing, peering, and cross-region connectivity within cloud environments.
Job Description (JD)
Position: Sr. Executive – Network
Experience: 8-10 Yrs
Job Summary:
We are looking for a highly skilled Senior Network Executive with extensive hands-on experience in managing complex enterprise networking environments. The ideal candidate should have strong expertise in Array Load Balancers, Fortinet, Sophos, SonicWall Firewalls, DMZ architecture, cloud networking (Azure & AWS), VPN technologies, routing, switching, and wireless infrastructure.
The role requires ownership of network availability, security, performance optimization, cloud connectivity, troubleshooting, and implementation of best practices across on-premises and cloud environments.
Technical Requirements
1. Strong hands-on experience with Array Networks Load Balancers (APV Series).
2. Expertise in FortiGate, Sophos, and SonicWall Firewall administration.
3. Strong knowledge of DMZ design and Internet-facing application architecture.
4. Experience with Enterprise Routing and Switching technologies.
5. Hands-on experience with OSPF, BGP, VLANs, VRRP, STP, QoS, and High Availability.
6. Experience in Site-to-Site VPN, IPsec VPN, SSL VPN, and Remote Access solutions.
7. Strong understanding of TCP/IP, DNS, DHCP, NAT, SNAT, DNAT, and Network Security.
8. Experience managing Fortinet Wireless Infrastructure (FortiAP).
9. Hands-on experience with Azure Networking components including VNet, NSG, Azure Firewall, Load Balancer, Application Gateway, ExpressRoute, and VPN Gateway.
10. Hands-on experience with AWS Networking including VPC, Security Groups, Route Tables, Transit Gateway, ALB, NLB, Direct Connect, and VPN.
11. Experience with Hybrid Cloud Networking and Multi-Cloud Connectivity.
12. Familiarity with WAF, DDoS Protection, IDS/IPS, and Security Monitoring solutions.
13. Experience in Network Monitoring and Log Analysis tools.
14. Ability to perform troubleshooting across network, security, application, and cloud layers.
15. Experience in preparing network documentation, architecture diagrams, and operational procedures.
16. Ability to independently handle critical incidents and major outages.
Preferred Experience
1. Data Center Network Management.
2. SD-WAN Implementation and Management.
3. Multi-ISP Network Design.
4. Cloud Migration Projects.
5. Security Audits and Compliance Requirements.
6. Vulnerability Management and Security Hardening.
7. Infrastructure Automation using PowerShell, Python, or Ansible.
Preferred Certifications:
Fortinet Certified Professional Network Security
Fortinet Certified Solution Specialist
Fortinet Certified Expert
Microsoft Certified Azure Network Engineer Associate
Microsoft Certified Azure Administrator Associate
AWS Certified Advanced Networking Specialty
AWS Certified Solutions Architect Professional
Sophos Certified Engineer
SonicWall Certified Professional
Array Networks Load Balancer Certification (if available)
Mandatory Skill Matrix (Screening Criteria)
• Array Load Balancer Administration – Expert
• FortiGate Firewall – Expert
• Sophos Firewall – Intermediate to Expert
• SonicWall Firewall – Intermediate to Expert
• Azure Networking – Expert
• AWS Networking – Expert
• DMZ Architecture – Expert
• Routing & Switching – Expert
• VPN Technologies – Expert
• Wireless Networking – Intermediate
• Security Hardening – Expert
• Incident Troubleshooting – Expert
• Documentation & RCA – Expert