Network & Connectivity Operations

· Administer and support enterprise LAN, WAN, SD-WAN, internet, MPLS and site-to-site connectivity across offices, branches, warehouses, data centres and customer environments.

· Configure, troubleshoot and optimize Cisco and HPE Aruba switches, routers, VLANs, STP, LACP, routing, QoS, DHCP, DNS, NAT, VPNs and high-availability designs.

· Monitor capacity, latency, packet loss, interface health and availability; proactively remove single points of failure and recurring performance bottlenecks.

· Plan and execute hardware refreshes, firmware upgrades, branch migrations and network changes with controlled rollback and minimal production impact.

Cybersecurity, Firewall & SASE

· Administer Check Point firewalls, security gateways and related management platforms, including policy, objects, NAT, VPN, threat prevention, logs, upgrades, backups and high availability.

· Design and operate SASE capabilities covering secure web access, remote access, branch connectivity, identity-aware access, cloud application control and security policy enforcement.

· Support endpoint security products such as EDR/EPP, anti-malware, host firewall, device control, disk encryption, web protection and security posture enforcement.

· Review alerts, firewall logs and security events; investigate suspected threats and coordinate containment, remediation, evidence collection and escalation with SOC or security partners.

· Conduct periodic rule-base reviews, access reviews, vulnerability remediation and security hardening in line with least privilege and organizational security standards.

Wireless Infrastructure

· Design, deploy and support enterprise Wi‑Fi using HPE Aruba access points and wireless controllers, including SSIDs, RF profiles, channels, roaming, guest access, authentication and segmentation.

· Perform wireless surveys and troubleshoot interference, weak coverage, congestion, authentication failures and controller/AP issues.

· Integrate corporate and guest wireless services with RADIUS/NAC, directory services, certificates and security policies.

Identity, Cloud & SaaS Integration

· Support network and security integrations with Active Directory and Microsoft Entra ID, including identity-based access, groups, RADIUS/NPS, SSO, MFA and conditional access dependencies.

· Support secure connectivity to Azure or other cloud environments using VPN, private connectivity, routing, DNS, network security controls and hybrid architecture principles.

· Enable and secure SaaS services through SSO, access policies, secure web gateway/CASB controls, logging and vendor integration requirements.

· Collaborate with server, cloud, application and security teams on changes affecting authentication, certificates, APIs, SAP/ERP, cloud workloads and business-critical services.

Service Operations & Incident Management

· Provide L3 support for complex incidents and service requests; restore services within agreed SLA and keep stakeholders informed during high-impact outages.

· Lead technical troubleshooting, major incident support, root-cause analysis and corrective/preventive actions for network and security failures.

· Maintain proactive monitoring, alert thresholds, configuration backups, availability dashboards and operational health checks for all critical assets.

· Guide L1/L2 engineers, review escalations and strengthen team capability through knowledge transfer, runbooks and technical coaching.

Projects, Architecture & Change

· Translate business requirements into secure, scalable and supportable network/security architectures, bills of quantity, implementation plans and acceptance criteria.

· Lead assigned infrastructure projects and coordinate internal stakeholders, customers, service providers, OEMs and implementation partners.

· Identify technical and project risks early, document mitigations, manage dependencies and escalate delivery delays or operational exposure.

· Follow change-management controls, complete impact/risk assessment, obtain approvals, validate implementation and maintain tested rollback plans.

Vendor, SLA, Cost & Compliance Governance

· Manage vendor performance against SLA, support contracts and project milestones; run service reviews and drive timely resolution of escalations.

· Track renewals, licenses, warranties and support coverage; evaluate proposals and recommend commercial or architectural options that improve value and reduce CAPEX/OPEX.

· Maintain network and security standards, asset/configuration records, diagrams, SOPs, build documents, support procedures and project handover packs.

· Register and periodically review infrastructure risks; support internal/external audits and comply with IT, information security, regulatory and data-protection requirements.

· Plan and verify preventive maintenance, disaster recovery readiness, configuration recovery and continuity measures for critical infrastructure.

*** Experienced in handling large Enterprise networks and security .

Desired Candidate Profile

Technical Competency

• Enterprise Switching (VLAN, STP, LACP, OSPF/BGP)

• Enterprise Wireless (Aruba/Cisco, RF, 802.1X, Roaming)

• Firewall (Check Point/Fortinet, NAT, IPS, App Control)

• VPN (IPSec, SSL VPN, Site-to-Site, Remote Access)

• SASE / Zero Trust (ZTNA, SWG, CASB, FWaaS)

• Microsoft Entra ID & Conditional Access

• Microsoft Intune & Endpoint Management

• Active Directory, DNS, DHCP, PKI & NPS/RADIUS

• Network Security (Segmentation, NAC, MFA, Micro-segmentation)

• Cloud Networking (Azure/AWS, VNet, VPN)

• Load Balancer / WAF / Reverse Proxy

• Monitoring, SIEM & Packet Analysis

• High Availability & Disaster Recovery

• Practical hands on Troubleshooting & RCA