Network Engineer

Are you naturally curious? So are we at MKS. Our collective curiosity drives us to be an innovation leader in many industries. Our products drive technology advancements across a wide range of applications such as 5G, augmented/virtual reality, autonomous vehicles, clean drinking water and space exploration. We are a team of collaborators who value fresh thinking and believe in mutual respect, constructive candor, diversity and inclusion. As a valued and trusted partner to our customers, we are continually pushing the boundaries of possibility. We believe in creating technology that transforms our world and are looking for like-minded individuals to join our team. If this is appealing to you, we want to meet you.

We are looking for an exceptional
Network Engineer based in Manesar, Gurugram
to join the MKS IT Enterprise Infrastructure team. This position will work with a team that is responsible for the full lifecycle development and support of daily operations of IT network infrastructure and networking functions for MKS global network operations. Experience working in a multisite and international IT environment is a requirement. The team is looking for a candidate that has the aptitude for a wide variety of responsibilities that enjoys a dynamic and challenging environment.

Key Responsibilities

• Design and manage enterprise network architecture across data centers, campus, and branch environments using Cisco Nexus (9000/7000/5000 series) and Aruba switches (8360, 6300, 6200).
• Lead deployment, configuration, and lifecycle management of FortiGate and Palo Alto firewalls with deep inspection, SSL decryption, advanced threat protection, and segmentation policies.
• Administer and optimize Forti Manager and Panorama for centralized firewall orchestration, policy versioning, and audit readiness.
• Architect and maintain Aruba ClearPass for policy-based NAC, 802.1X, RADIUS, TACACS+, endpoint profiling, and guest/onboarding services.
• Provide comprehensive support for Cisco ASA and Juniper SRX firewalls in hybrid environments.
• Oversee deployment, configuration, and support of Aruba Wireless Access Points (WAPs) and manage wireless services via Aruba Central, including advanced programming, policy configuration, and performance tuning.
• Ensure 24/7 visibility, performance, and health of the network using SolarWinds (NPM, NTA, NCM) and integrate alerts with ServiceNow (SNOW) for automated ticketing and incident tracking.
• Lead complex network troubleshooting, including packet captures, log analysis, and root cause investigations across multi-vendor environments.
• Drive documentation, standards development, and mentoring junior engineers.
• Collaborate with cybersecurity, cloud, and application teams to ensure secure and scalable connectivity.

Core Technical Competencies

• Switching & Routing:

• Cisco Nexus (9000/7000/5000) – VPC, VDCs, VXLAN, BGP, OSPF, QoS

• Aruba CX Switching (8360, 6300, 6200) – VSX, OSPF, ACLs, Net Edit

• Firewalls & Security Platforms:

• Extensive experience with FortiGate firewalls, including Deep Packet Inspection, VPN configuration (IPsec etc.), SD-WAN optimization, Unified Threat Management (UTM), and Virtual Domains (VDOM) for secure multi-tenant environments

• In-depth knowledge of Palo Alto Networks technologies including App-ID, Threat Prevention, URL Filtering, Global Protect VPN, and Virtual Systems for secure, scalable firewall segmentation and remote access.
• Expertise in Forti Manager and Panorama for centralized, multi-firewall management, policy standardization, automated deployment, version control, and compliance auditing across enterprise environments.

• Cisco ASA & Juniper SRX – Traditional perimeter security, NAT, routing

• Access Control & Wireless:

• Aruba ClearPass – Authentication, profiling, policy enforcement

• Aruba Central – Cloud-managed WAPs, RF optimization, role-based access
• WAPs – Enterprise-grade wireless architecture and tuning
• Aruba CX switching platforms: 8360, 6300, 6200 – advanced CLI and Aruba Central GUI expertise
• Aruba Central: Template-based provisioning, variable injection, configuration groups, and firmware orchestration
• Layer 3 routing: OSPF, static routing, VRFs, routed interfaces, IP SLA
• VSX configuration for high availability and multi-path redundancy
• Zero-touch provisioning (ZTP) using Central's onboarding framework
• Familiarity with REST APIs, Python scripting, or automation tools for network configuration (a plus)

• Experience integrating Aruba Central with ClearPass for NAC policies (preferred)

• Monitoring & Automation Tools:

• SolarWinds – NPM, NTA, NCM, Net Path

• ServiceNow (SNOW) – ITSM processes, CMDB, change management