Design, deploy, and manage enterprise wireless infrastructure using Aruba controllers and accesspoints (campus, warehouse, and high-density environments)
Configure and maintain complex routing protocols including BGP (eBGP/iBGP), OSPF (multi-area), androute redistribution across the enterprise
Manage Layer 2/Layer 3 switching environments — VLANs, trunking, STP/RSTP/MSTP, port-channels,and access control
Implement and manage next-generation firewalls including rule creation, NAT, decryption, threatprevention, URL filtering, and security policy lifecycle management
Design and troubleshoot IPSec VPN tunnels (site-to-site and remote access) and VPN gateways forsecure connectivity across hybrid environments
Architect and manage network infrastructure in Google Cloud Platform (GCP) — VPCs, CloudInterconnect, Cloud VPN, shared VPCs, firewall rules, and Cloud Router
Deploy and manage SD-WAN solutions for branch connectivity, traffic steering, application-awarerouting, and WAN optimization
Perform capacity planning, network health monitoring, and proactive performance optimization
Lead incident response for network outages — root cause analysis, resolution, and post-mortem documentation
Collaborate with Security, Cloud, and Application teams on network architecture decisions
Develop and maintain network automation scripts (Python, Ansible, Terraform) for configuration management
Mentor junior network engineers and contribute to knowledge base documentation
Wireless Networking: 5+ years hands-on experience with Aruba wireless — controller-based and Aruba Central (cloud-managed) deployments, RF design, site surveys, 802.11ax/Wi-Fi 6, AP provisioning, andwireless security (WPA3, 802.1X, RADIUS)
Routing: Expert-level knowledge of BGP (peering, route policies, communities, prefix lists) and OSPF(area design, LSA types, stub areas, route summarization)
Switching: Advanced L2/L3 switching — STP tuning, VXLAN/EVPN (preferred), 802.1Q, LACP, DHC Prelay, ARP optimization
Firewall & Security: Solid understanding of next-gen firewall concepts — zone-based policy, App-ID, decryption, threat prevention, and security profiles
VPN / IPSec: Hands-on with IKEv1/IKEv2, IPSec tunnel and transport mode, GRE over IPSec, certificate-based and PSK authentication, VPN gateway high availability
Cloud Networking (GCP): Experience with GCP networking — VPC design, Cloud Interconnect/Partner Interconnect, Cloud VPN, Cloud NAT, GCP firewall rules, Private Service Connect
SD-WAN: Experience deploying and managing SD-WAN solutions (Prisma SD-WAN, Viptela, Velocloud,or equivalent) — hub/spoke, application policies, SLA-based routing
General: 8+ years in enterprise network engineering across campus, WAN, data center, and cloud environments
Palo Alto Networks firewall experience — PAN-OS, Panorama management, Global Protect VPN, decryption, and security profiles (strong advantage)
Experience with Prisma Access (SASE) and Prisma SD-WAN
Certifications: ACMP (Aruba), PCNSE (Palo Alto), CCNP/CCIE, Google Cloud Network Engineer
Network automation: Python, Ansible, Terraform, REST APIs
Experience with network monitoring tools (PRTG, Logic Monitor, Thousand Eyes, ADEM)
Familiarity with Zero Trust Network Architecture (ZTNA) concepts
Experience managing networks in a global, multi-region environment
Understanding of DNS, DHCP, NTP, SNMP, syslog, and Netflow at enterprise scale