Lead Network Engineer

Job description

Job Description Lead Network Administrator Location: Bangalore Experience: 6 – 11years Role Summary We are hiring a Lead Network Administrator responsible for end-to-end implementation, hardening, and management of our enterprise network and security infrastructure. The candidate must have strong hands-on experience in Palo Alto Firewalls, Netskope Secure Web Gateway, Aruba NAC (ClearPass), Aruba Central, Cisco/Aruba Switching, and must ensure the environment remains secure, hardened, and vulnerability-free. Core Responsibilities 1. Palo Alto Firewall – End-to-End Ownership • Full implementation and management of Palo Alto Next-Generation Firewalls across all locations. • Configure and optimize: • Security policies • NAT policies • App-ID, User-ID • SSL decryption • Threat profiles • Manage GlobalProtect VPN, HIP-based authentication, and regular user access • reviews. • Perform device hardening, config audits, best-practice alignment, and vulnerability remediation. • Plan and execute firmware upgrades and ensure stability, performance, and • compliance. • Monitor traffic patterns, threats, content updates, and ensure continuous protection. 2. Secure Web Gateway – Netskope • Manage Netskope Secure Web Gateway for secure internet access, DLP, and advanced threat protection. • Implement policies for URL filtering, SSL inspection, CASB access, and user protection. • Troubleshoot Netskope agent issues, policy mismatches, and connectivity problems. • (Optional/Future) Support Netskope ZTNA implementation if procured. 3. Network Access Control – Aruba ClearPass • Configure and manage ClearPass NAC for 802.1X, MAC authentication, profiling, and onboarding. • Enforce identity-based access and continuous security checks. • Troubleshoot NAC authentication and endpoint posture issues. 4. Wireless and Switching – Aruba & Cisco • Manage Aruba APs via Aruba Central—SSID setup, wireless security, RF optimization. • Configure and maintain Cisco and Aruba switches (VLANs, routing, trunking,STP, ACLs). • Enforce full device hardening, secure configs, and patch management for switching/WLAN. 5. WAN, Routing & Cloud Connectivity • Manage AWS Direct Connect, VPN tunnels, and office–cloud connectivity. • Troubleshoot MPLS, BGP routing, latency, and inter-site network flows. • Work with ISPs for bandwidth, routing optimization, and uptime SLAs. 6. Network Hardening & Security Posture Ensure zero vulnerabilities across all network devices through continuous hardening. • Perform configuration reviews, compliance checks, and timely patching. • Conduct RCA for network/security incidents and drive long-term corrective actions. • Maintain endpoint network security integration with firewall/NAC/SWG. 7. Automation & Lifecycle Management • Automate network tasks using scripting/tools (where applicable). • Perform periodic firmware and OS upgrades for all network/security devices. • Maintain version standards aligned with industry recommendations. Key Skills & Experience 6–9 years in enterprise networking with strong hands-on exposure. Expertise in: o Palo Alto Firewalls (mandatory) o Netskope SWG (mandatory) o Aruba ClearPass NAC (mandatory) o Aruba Central & APs o Cisco / Aruba switching o VPNs, BGP, MPLS • Strong troubleshooting across OSI layers 1–7. • Proven experience with network hardening and vulnerability remediation. • Ability to independently manage and secure medium/large-scale network environments.