Network Admin

**Job Information**:
Industry

**IT Services**
***

Province

**Karnataka**
***

City

**Bangalore North**
***

Postal Code

**560001**
***

Country

**India**

Firewall Admin
- L2

Position Description
- SE- Network Admin -Firewall
- L2

Level 2 | 6-8 YRS
- Ability to manage Cisco AnyConnect VPN servers and client software.
- Working knowledge of Service-Now modules, including Request, Change, Incident, Problem, and Project Management workflows. Ability to update configuration items when changes are made.
- Installation of routing and switching technologies, 802.1q, STP, RSTP, MSTP, VLAN, MPLS, VRF.
- Good knowledge of TCP/IP packet analysis, using Wireshark or raw packet captures using tcpdump.
- Scripting or Automation knowledge is desirable
- Cisco Firepower and Cisco IronPort, Cisco AMP
- Working on Firewall Technologies like Palo Alto, cisco ASA, Fortinet. Working on F5 BIG IP Application, Radware App Load Balancer,F5 APM
- Authentication: Cisco ISE, TACACS+, LDAP/Radius Server, Cisco ACS server
- Installation and Up-gradation and troubleshooting of firewalls
- Troubleshooting and maintenance of all firewalls if has there any issues in policy and access.
- Extensive triage and resolution of Network related Incidents (Data & Security). Actively involved in troubleshooting and resolve the P1 and P2 Incidents in Network landscape.
- Fulfilment of Network Requests like new device installation, configurations.
- A senior technical resource within the team who can manage complex networks including datacenters.
- Contributing to day-to-day network issues, including managing Critical issues to resolution and adjusting to priority requests to support the Business requirement.
- Conducting Network audit in the current environment to identify the gaps and challenges in the technology, team expertise, process, documentations etc. and deploying the service improvement plan.
- Supporting during the technical escalations / elevated support for maintaining service level agreements.
- Provide incident response & resolution as part of the 24x7 Network Operations Center
- Providing a positive image of the company through your role being a point of contact with onshore team/customer.
- Must proactively help junior team members in resolving issues while being open to share their knowledge.
- To ensure that all is work carried out in accordance with ITIL Incident Management guidelines
- Should be able to follow the ticketing process according to the change request phases that are defined.
- Add value to your team environment by being enthusiastic and maintaining a Positive attitude.
- To achieve all team and personal performance goals as defined by the company
- Ensure tickets assigned to the queue are accepted and worked on time
- Monitor 'open' Change tickets
- Adhere to ISO9000 and ISO27001 procedures
- Ensure that your individual training record is kept up to date
- Ensure that proper technical guidance is provided to the members when required
- Responsible for handling the Entire Network of a major Client.
- Provide technical leadership within a highly technical team
- Years of experience - 12+ above
- Certification : CCIE or equivalent expert level certifications
- SME : Network Engineer is accountable for overall Data networks security. Network Designing experiences will be an add on.
- Good working knowledge of current IT risks and experience implementing security solutions
- Experience implementing multi-factor authentication, single sign-on, identity management or related technologies
- Ability to interact with a broad cross-section of personnel to explain and enforce security measures
- Expertise in TACAS / RADIUS
- Appliance - ISE, Cisco ACS & Cisco Prime., IPAM- DHCP server & Infoblox
- Strong ability to interact with all levels of the organization
- Experience around Networking (i.e. WAN,SD-WAN,MPLS etc.),Next Gen Firewalls (NGFWs),CASB,Proxy,Cloud Security etc.
- Continuous self-improvement and learning to maintain technical leadership of applicable technologies (data center, SDN, public cloud, security, networking, etc.)
- Tunneling protocols such as SSL/TLS, IPsec, GRE
- Authentication methodologies, including 2FA, RADIUS, LDAP, AD
- IP Routing: BGP, Static, Network Address Translation
- Certificate Management
- Next Generation Firewall capabilities, configuration, and deployment
- Must have very good knowledge and experience in design and deployment/ implementation of 3rd party vendor appliances like firewalls, load balancers, etc. in active/active, active/standby architectures.
- Should have good knowledge and hands on experience in design/deployment of conventional datacenter or enterprise environments with network and security components like - Cisco/Juniper Router, Cisco/Junipers Switches, Cisco Nexus Switches, Cisco/Juniper/Palo Alto/Fortinet Next Generation Firewalls and Next Gen IDS/IPS, F5 LTM/GTM Load balancers.
- Experience around Networking (i.e. WAN, SD-WAN, MPLS etc.), Next Gen Firewalls (NGF