Network Engineer

Are you naturally curious? So are we at MKS. Our collective curiosity drives us to be an innovation leader in many industries. Our products drive technology advancements across a wide range of applications such as 5G, augmented/virtual reality, autonomous vehicles, clean drinking water and space exploration. We are a team of collaborators who value fresh thinking and believe in mutual respect, constructive candor, diversity and inclusion. As a valued and trusted partner to our customers, we are continually pushing the boundaries of possibility. We believe in creating technology that transforms our world and are looking for like-minded individuals to join our team. If this is appealing to you, we want to meet you.

We are looking for an exceptional Network Engineer based in Manesar, Gurugram to join the MKS IT Enterprise Infrastructure team. This position will work with a team that is responsible for the full lifecycle development and support of daily operations of IT network infrastructure and networking functions for MKS global network operations. Experience working in a multisite and international IT environment is a requirement. The team is looking for a candidate that has the aptitude for a wide variety of responsibilities that enjoys a dynamic and challenging environment.

Key Responsibilities

• Design and manage enterprise network architecture across data centers, campus, and branch environments using Cisco Nexus (9000/7000/5000 series) and Aruba switches (8360, 6300, 6200).
• Lead deployment, configuration, and lifecycle management of FortiGate and Palo Alto firewalls with deep inspection, SSL decryption, advanced threat protection, and segmentation policies.
• Administer and optimize Forti Manager and Panorama for centralized firewall orchestration, policy versioning, and audit readiness.
• Architect and maintain Aruba ClearPass for policy-based NAC, 802.1X, RADIUS, TACACS+, endpoint profiling, and guest/onboarding services.
• Provide comprehensive support for Cisco ASA and Juniper SRX firewalls in hybrid environments.
• Oversee deployment, configuration, and support of Aruba Wireless Access Points (WAPs) and manage wireless services via Aruba Central, including advanced programming, policy configuration, and performance tuning.
• Ensure 24/7 visibility, performance, and health of the network using SolarWinds (NPM, NTA, NCM) and integrate alerts with ServiceNow (SNOW) for automated ticketing and incident tracking.
• Lead complex network troubleshooting, including packet captures, log analysis, and root cause investigations across multi-vendor environments.
• Drive documentation, standards development, and mentoring junior engineers.
• Collaborate with cybersecurity, cloud, and application teams to ensure secure and scalable connectivity.

Core Technical Competencies

• Switching & Routing:
• Cisco Nexus (9000/7000/5000) – VPC, VDCs, VXLAN, BGP, OSPF, QoS
• Aruba CX Switching (8360, 6300, 6200) – VSX, OSPF, ACLs, Net Edit
• Firewalls & Security Platforms:
• Extensive experience with FortiGate firewalls, including Deep Packet Inspection, VPN configuration (IPsec etc.), SD-WAN optimization, Unified Threat Management (UTM), and Virtual Domains (VDOM) for secure multi-tenant environments
• In-depth knowledge of Palo Alto Networks technologies including App-ID, Threat Prevention, URL Filtering, Global Protect VPN, and Virtual Systems for secure, scalable firewall segmentation and remote access.
• Expertise in Forti Manager and Panorama for centralized, multi-firewall management, policy standardization, automated deployment, version control, and compliance auditing across enterprise environments.
• Cisco ASA & Juniper SRX – Traditional perimeter security, NAT, routing
• Access Control & Wireless:
• Aruba ClearPass – Authentication, profiling, policy enforcement
• Aruba Central – Cloud-managed WAPs, RF optimization, role-based access
• WAPs – Enterprise-grade wireless architecture and tuning
• Aruba CX switching platforms: 8360, 6300, 6200 – advanced CLI and Aruba Central GUI expertise
• Aruba Central: Template-based provisioning, variable injection, configuration groups, and firmware orchestration
• Layer 3 routing: OSPF, static routing, VRFs, routed interfaces, IP SLA
• VSX configuration for high availability and multi-path redundancy
• Zero-touch provisioning (ZTP) using Central's onboarding framework
• Familiarity with REST APIs, Python scripting, or automation tools for network configuration (a plus)
• Experience integrating Aruba Central with ClearPass for NAC policies (preferred)
• Monitoring & Automation Tools:
• SolarWinds – NPM, NTA, NCM, Net Path
• ServiceNow (SNOW) – ITSM processes, CMDB, change management

Globally, our policy is to recruit individuals from wide and diverse backgrounds. However, certain positions require access to controlled goods and technologies subject to various export control regulations. Applicants for these positions may be limited (by, for example, their countries of citizenship, country of origin, or immigration status) where required by law or governmental contact, and/or employment made contingent upon the issuance of appropriate governmental licensing.

MKS Inc. and its affiliates and subsidiaries ("MKS") is an affirmative action and equal opportunity employer: diverse candidates are encouraged to apply. We win as a team and are committed to recruiting and hiring qualified applicants regardless of race, color, national origin, sex (including pregnancy and pregnancy-related conditions), religion, age, ancestry, physical or mental disability or handicap, marital status, membership in the uniformed services, veteran status, sexual orientation, gender identity or expression, genetic information, or any other category protected by applicable law. Hiring decisions are based on merit, qualifications and business needs. We conduct background checks and drug screens, in accordance with applicable law and company policies. MKS is generally only hiring candidates who reside in states where we are registered to do business.

MKS is committed to working with and providing reasonable accommodations to qualified individuals with disabilities. If you need a reasonable accommodation during the application or interview process due to a disability, please contact us at: .

If applying for a specific job, please include the requisition number (ex: RXXXX), the title and location of the role