Network Engineer

Job Description Must Have Technical/Functional Skills Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN). Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet. Expertise in firewalls, VPNs, network segmentation, IDS/IPS. Familiarity with SD-WAN, load balancing, and NAC solutions. Linux and Windows administration expertise. Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO. Cybersecurity & Compliance Skills Knowledge of NIST 800-53, RMF, CIS benchmarks, DISA STIG hardening. Experience integrating logs into SIEM platforms (Splunk, QRadar, Elastic). Familiarity with IAM, MFA, Zero Trust, segmentation models. Ability to support SOC incident response activities. Automation & Tooling Scripting skills: Python, Bash, PowerShell. Automation: Ansible, Terraform, CloudFormation, GitLab CI/CD. Knowledge of monitoring frameworks (Prometheus, Grafana, CloudWatch). Proficiency in leveraging Artificial Intelligence (AI) to drive innovation and efficiency within technical domains. Core Network Engineering Duties Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking). Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN). Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles. Implement network telemetry, logging, and packet‑capture visibility solutions. Ensure network resiliency, redundancy, and capacity planning across environments. Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs). Perform network performance troubleshooting, service restoration, and RCA documentation. Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX-OS upgrades. Core Systems Engineering Duties Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper‑V). Configure and optimize system performance, storage, virtualization, and backups. Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents). Deploy and manage containers, Kubernetes, orchestration systems. Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management. Support patching, OS hardening, system logging, FIM, vulnerability remediation. Conduct performance and health monitoring of critical compute resources and services. Cybersecurity & Compliance Responsibilities Integrate network/sys logs into SIEM platforms following CIM or standardized schema. Implement network and system controls supporting ISO27001, or NIST RMF compliance. Support incident response through data collection, log analysis, containment actions, and implementing Manage access controls, least‑privilege enforcement, and identity integrations for infrastructure. Support audit evidence collection and configuration/state reporting. #J-18808-Ljbffr Tata Consultancy Services Limited