Network Lead

Role Overview We are seeking a highly experienced and self-driven Senior Network Engineer to lead the design, implementation, and optimization of enterprise-level network infrastructure. The ideal candidate should possess deep hands-on expertise in Cisco Routing & Switching, Firewalls, Cisco SD-WAN, Cisco DNA Center (DNAC), and Wireless LAN Controllers (WLCs). This role demands a proactive approach to network performance, security, and scalability across large and complex environments. Key Responsibilities - Design and deploy robust network architecture using Cisco routing, switching, and wireless technologies. - Lead the configuration, troubleshooting, and optimization of Cisco routers and switches (OSPF, BGP, EIGRP, HSRP, QoS). - Plan, implement, and manage Cisco SD-WAN solutions (vManage, vSmart, vBond) for secure and scalable WAN connectivity. - Operate and maintain Cisco DNA Center (DNAC) for network automation, assurance, telemetry, and Software-Defined Access (SD-Access). - Manage and troubleshoot Wireless LAN Controllers (WLCs) and associated Access Points (APs), ensuring optimal wireless performance. - Administer and secure perimeter and internal network using Cisco ASA / Firepower NGFW (ACLs, NAT, VPN, IPS/IDS). - Lead incident response, root cause analysis (RCA), and implement permanent corrective actions. - Collaborate with security, cloud, and server teams for integrated IT infrastructure deployments. - Create and maintain high-quality network documentation including topologies, IP schemas, and SOPs. - Stay updated with the latest in Cisco technologies and recommend best practices for continuous improvement. Required Technical Skills - Cisco Routing & Switching: Deep understanding and hands-on experience with Layer 2/3 protocols (VLANs, STP, HSRP, VRRP, OSPF, BGP, etc.) - Cisco SD-WAN: Deployment, management, policy configuration, and monitoring via vManage. - Cisco DNAC: Experience with automation templates, device provisioning, assurance, and analytics. - Wireless Technologies: Strong experience with Cisco WLCs (e.g., 9800 series), RF tuning, SSID provisioning, and wireless security. - Firewalls: Proficiency in Cisco Firepower / ASA with experience in NAT, site-to-site VPNs, remote access VPNs, and firewall rule management. - Monitoring & Tools: Experience with SNMP, NetFlow, Syslog analysis, tools like SolarWinds, PRTG, or Cisco Prime Infrastructure. - Familiarity with network segmentation, zero-trust principles, and network access control (NAC) solutions. Soft Skills & Expectations - Strong analytical and troubleshooting skills in complex environments. - Ability to lead projects independently and mentor junior team members. - Effective communicator – able to convey technical information clearly to both technical and non-technical stakeholders. - Proficient in documentation, change management, and risk assessment. - Comfortable working in 24x7 mission-critical environments (with possible on-call support). Education & Certifications - Bachelor's degree in Computer Science, Information Technology, or a related field. - Mandatory Certifications: CCNP Enterprise or equivalent. - Preferred Certifications: CCNP Security, Cisco SD-WAN Specialist, Cisco Certified DevNet Associate/Professional, or progress toward CCIE. Nice to Have - Experience with Cisco ISE and integration with DNAC for access policy enforcement. - Exposure to cloud networking (AWS, Azure) and hybrid network models. - Knowledge of scripting (Python), REST APIs, or automation tools (Ansible, Terraform) for network automation.