Network Security Engineer

Job Description: Network L2 1. Role Overview The Network Level‑2 (L2) Engineer provides advanced operational support for enterprise network infrastructure, acting as the escalation point for Level‑1 teams. The role focuses on troubleshooting, configuration, incident resolution, change execution, and maintaining high network availability across LAN, WLAN, WAN, SD‑WAN, and security components. 2. Responsibilities A. Incident & Problem Management Handle L2 network incidents, escalated tickets, and service requests within defined SLAs. Perform advanced troubleshooting of: Switching (L2/L3) Routing protocols (EIGRP, OSPF, BGP) Wireless access points & controllers Firewalls (basic rule and connectivity troubleshooting) SD‑WAN overlays and underlay issues Conduct root cause analysis (RCA) and provide permanent fixes. Engage with vendors (Cisco, Aruba, Fortinet firewall, etc.) for TAC cases when required. B. Network Operations & Maintenance Perform proactive monitoring using tools such as SolarWinds, PRTG, Cisco Prime, DNA Center, or equivalent. Analyze recurring alerts, interface failures, and stability issues to prevent outages. Manage port activations, VLAN modifications, trunk configuration, switch stacking support, etc. Execute device upgrades, patches, and maintenance activities under change management process. C. Configuration & Change Management Prepare and implement standard and normal changes following ITIL processes. Deploy network configurations for: Switches (Cisco/Aruba/Juniper) Routers Wireless controllers SD‑WAN CPE Basic firewall routing/NAT changes Validate and test changes, ensuring minimal business impact. Maintain configuration backups using tools like RANCID, SolarWinds NCM, or Git-based repositories. D. Documentation & Reporting Maintain network topology diagrams, IP address plans, and configuration standards. Update ticket logs, SOPs, KB articles, and RCA reports. Provide periodic reports: Incident trends Network performance metrics Change success/failure analysis E. Collaboration & Support Work closely with: L1 support teams Security operations teams Datacenter/network architecture teams ISP/vendor field engineers Provide technical guidance to junior engineers and assist in escalation reduction. 3. Skill & Experience Requirements Technical Skills Strong knowledge of: L2 switching (STP, RSTP, port security) VLANs, trunking, EtherChannel Routing protocols (OSPF, EIGRP, BGP basics) DHCP, DNS, NAT, ACLs WAN links (MPLS, Internet, LTE backups) SD‑WAN platforms (Cisco Viptela/Meraki/Aruba) Wireless technologies (SSID, RF basics, controller-based WLAN) Hands-on experience with Cisco IOS/NX‑OS or equivalent platforms. Tools Monitoring: SolarWinds, PRTG, Nagios, StealthWatch Ticketing: ServiceNow, Remedy, or equivalent Configuration tools: Cisco Prime, DNAC, Aruba AirWave Certifications (Preferred) CCNA mandatory CCNP Enterprise or Wireless (preferred) ITIL Foundation 4. Deliverables Guaranteed adherence to SLA/OLA for incident & service request closure. Accurate implementation of approved network changes. Weekly/monthly performance & health reports. Up-to-date documentation and runbooks. RCA documents for high-severity incidents. 5. Work Schedule & Engagement Model 24×7 shift support / rotational shifts (as per business requirement). On-call availability for P1/P2 emergencies.