The Role
Operate, troubleshoot, optimize, and secure enterprise LAN/WAN, Wi-Fi, firewall, VPN, SD-WAN, and SSE infrastructure. Manage Cisco networking, SonicWall and Fortinet firewalls, Netskope security policies, monitoring, incident response, root-cause analysis, change control, documentation, compliance, and audit readiness. Collaborate with InfoSec, cloud, workplace, application teams, and vendors on migrations, branch rollouts, security improvements, and network reliability.
Summary Generated by Built In
We’re seeking an experienced Network & Security Engineer with 4 years of experience to operate, optimize, and secure enterprise network infrastructure. The ideal candidate will own L2/L3 troubleshooting, implement security policies, and drive continuous improvement across Cisco switching/routing, SonicWall & Fortinet firewalls, Cisco WLC/Wi‑Fi, and SSE solutions like Netskope.
Requirements
Key Responsibilities
Operations & Support
- Provide L2/L3 support for LAN/WAN, Wi‑Fi, and security incidents; drive root cause analysis and permanent fixes.
- Manage and optimize Cisco routers/switches (OSPF/EIGRP, STP, VLANs, HSRP/VRRP, QoS).
- Administer Cisco WLC and enterprise Wi‑Fi (AP provisioning, RF optimization, WPA2/3‑Enterprise, 802.1X).
Firewall & Security
- Configure and maintain SonicWall and Fortinet (FortiGate) firewalls (NAT, VPN, SD‑WAN, policies, IPS/AV/WEB).
- Implement site‑to‑site and remote‑access VPNs, certificate management, and high availability.
- Tune security profiles (IPS, Anti‑Virus, Web Filter, Application Control) and monitor threat activity.
SSE / Cloud Security
- Operate Netskope (SWG, CASB, ZTNA/DLP policies), integrate with IdP (Azure AD/Okta), and onboard endpoints.
- Analyze SSE logs/events; optimize policies for user experience and risk reduction.
Monitoring & Reliability
- Maintain FortiAnalyzer, SonicWall Analytics.
- Define and track SLAs/OLAs; drive capacity planning and performance baselines.
Change & Compliance
- Lead changes via ITIL processes (Request/Change/Problem); maintain network diagrams and SOPs.
- Ensure compliance with security standards (e.g., ISO 27001, CIS Benchmarks) and audit readiness.
Collaboration
- Work with InfoSec, Workplace, Cloud, and App teams on new projects (M&A, branch rollout, cloud migrations).
- Vendor coordination for complex issues, RMAs, and firmware advisories.
Must‑Have Skills
- Routing/Switching: VLAN, trunking, inter‑VLAN, STP/RSTP, NAT, QoS.
- Cisco WLC/Wi‑Fi: RF design basics, AP groups, FlexConnect/Local mode, RADIUS/802.1X, Fast Secure Roaming.
Firewalls:
- SonicWall: Access rules, NAT, DPI, VPN (IKEv2), App Control, HA.
- Fortinet: Policy/Objects, SD‑WAN, IPSec/SSL‑VPN, UTM profiles, HA (A‑A/A‑P), FortiManager/FortiAnalyzer.
- Netskope: SWG, CASB, ZTNA, DLP, policy creation, client deployment, log analysis.
- Security Foundations: TCP/IP, TLS/PKI, DNS/DHCP, identity-aware policies, segmentation (ACLs/VLANs).
- Scripting/Automation (nice-to-have): Python/PowerShell, REST APIs for device/report automation.
- Tooling: Wireshark, Nmap, SolarWinds/PRTG, FortiAnalyzer, SonicWall Analytics,
Certifications (Preferred)
- Cisco: CCNA (required or equivalent)
- Fortinet: NSE 4 (Firewall Professional) or higher (NSE 5/7 nice-to-have).
- SonicWall: SNSA/SNSP (preferred).
- Netskope: NSA (Administrator) / NPA (preferred).
- Security & ITSM: CompTIA Security+, ITIL Foundation.
Soft Skills
- Strong customer communication and incident ownership.
- Clear documentation and change control discipline.
- Analytical mindset for RCA and risk-based decision making.
- Collaboration across cross-functional teams and vendors.
KPIs / Success Metrics
- Incident SLAs: ≥95% resolution within SLA; reduced MTTR.
- Stability: Lower repeat incidents; proactive problem records closed.
- Security Posture: Reduced false positives, policy compliance, and timely patching/firmware.
- Performance: Wi‑Fi user experience (latency, throughput), WAN utilization, SD‑WAN path quality.
- Design: Branch network with dual ISP, SD‑WAN, and ZTNA access.
- Troubleshooting: Intermittent Wi‑Fi drops on specific SSID—RF vs. RADIUS vs. DHCP analysis.
- Security: DLP policy conflicts in Netskope; tuning to reduce false positives.
- Firewalls: Migrating SonicWall to FortiGate with parity policies and VPNs.
- Packet analysis: TLS handshake failures; SNI-based policy impacts.
- Audit Readiness: Up-to-date diagrams, SOPs, access reviews, and config backups.
Education
Bachelor’s in Computer Science/IT/ECE (or equivalent experience).
Bachelor’s in Computer Science/IT/ECE (or equivalent experience).
Benefits
• Health insurance coverage for employee, spouse, and kids
• Retirement savings plan with employer matching contributions
• Opportunities for professional development and advancement within the organization
Skills Required
- Four years of network and security engineering experience
- Bachelor's degree in Computer Science, IT, ECE, or equivalent experience
- L2/L3 LAN/WAN, Wi-Fi, and security incident troubleshooting
- Cisco routing and switching, including VLANs, trunking, inter-VLAN routing, STP/RSTP, NAT, and QoS
- Cisco WLC and enterprise Wi-Fi, including RF fundamentals, AP groups, FlexConnect or Local mode, RADIUS, 802.1X, and fast secure roaming
- SonicWall firewall administration, including access rules, NAT, DPI, IKEv2 VPN, application control, and high availability
- Fortinet FortiGate administration, including policies, objects, SD-WAN, IPSec or SSL-VPN, UTM profiles, high availability, FortiManager, and FortiAnalyzer
- Netskope administration, including SWG, CASB, ZTNA, DLP, policy creation, client deployment, and log analysis
- Security foundations covering TCP/IP, TLS/PKI, DNS/DHCP, identity-aware policies, and network segmentation
- CCNA certification or equivalent
- Python or PowerShell scripting and REST API automation
- Fortinet NSE 4 or higher certification
- SonicWall SNSA or SNSP certification
- Netskope NSA or NPA certification
- CompTIA Security+ certification
- ITIL Foundation certification
- Experience with Wireshark, Nmap, SolarWinds, PRTG, FortiAnalyzer, and SonicWall Analytics
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
PowerBridge is an India-based audio visual and IT infrastructure solutions and services provider. It helps customers modernize technology through project delivery, infrastructure upgrades, and telecom initiatives, working with industry-leading technology partners under time-bound service-level agreements. With headquarters in Bangalore and an office in Hyderabad, the company supports customers across India through cross-functional teams focused on reliable, hassle-free technology implementation.
