The Role
Lead customer network deployments and brownfield migrations, design and troubleshoot advanced routing and VPN architectures, implement and manage Fortinet and Cisco firewall solutions, perform TAC-level debugging (packet captures, device debug), and own production change windows aligned to US hours.
Summary Generated by Built In
This is a remote position.
About the Role
We are hiring a highly technical Senior Network Engineer with strong experience in customer deployments (Greenfield and Brownfield environments). The ideal candidate should have prior experience in an OEM TAC environment (Cisco, Juniper, Fortinet) or at a high-end system integrator handling escalations and complex troubleshooting.
This role focuses on:
- Customer network deployments
- Production migrations
- Firewall and routing implementations
- Advanced routing design and troubleshooting
- Enterprise VPN architectures
The candidate must be a routing champion with deep protocol-level understanding and real-world implementation experience.
Primary Responsibilities
1. Customer Deployments (Primary Focus)
- Lead Greenfield network deployments.
- Execute Brownfield migrations with minimal downtime.
- Perform firewall cutovers and routing transitions.
- Design and implement secure WAN architectures.
- Participate in customer change windows aligned to U.S. hours.
2. Routing (Deep Expertise Required)
Strong hands-on implementation and troubleshooting experience with:
- BGP (iBGP, eBGP, route reflectors, route maps)
- OSPF (multi-area, LSA troubleshooting)
- Static routing & policy-based routing
- Redistribution strategies
- VRF segmentation
- MPLS fundamentals
- Route filtering and prefix lists
Must be able to debug routing issues from packet capture level.
3. Firewall & Security Platforms
Hands-on deployment and troubleshooting:
Fortinet (Strongly Preferred)
- FortiGate deployment
- HA clustering
- IPSec VPN configuration
- SSL VPN
- Policy optimization
- NAT policies
- SD-WAN configuration
Cisco ASA
- ASA firewall configuration
- Site-to-site IPSec VPN
- Remote access VPN
- AnyConnect deployment
- ACL and NAT troubleshooting
Experience with Juniper SRX or other enterprise firewalls is a plus.
4. VPN Technologies
- Site-to-site IPSec VPN
- Remote access VPN
- SSL VPN
- Policy-based and route-based VPNs
- Phase 1 / Phase 2 troubleshooting
- Encryption domain mismatches
- MTU/MSS tuning
5. Switching
- VLAN design
- Trunking (802.1Q)
- STP / RSTP troubleshooting
- Port-channel configuration
- L2/L3 switching concepts
- Inter-VLAN routing
6. Troubleshooting & TAC-Level Debugging
- Packet captures (Wireshark, tcpdump)
- Debug commands on Cisco/Fortinet
- Control-plane vs data-plane isolation
- CPU and memory troubleshooting
- Log analysis and RCA documentation
Experience working in OEM TAC (Cisco/Juniper/Fortinet) or handling escalated cases is highly desirable.
Required Technical Qualifications
- Minimum CCNP or Equivalent (Mandatory)
- 6+ years of enterprise networking experience
- Strong BGP implementation experience
- Hands-on Fortinet firewall deployments
- Cisco ASA configuration experience
- IPSec VPN troubleshooting expertise
- Experience in customer-facing roles
Preferred Qualifications
- CCNP Security or CCIE (Preferred but not mandatory)
- Fortinet NSE certification
- Experience with SD-WAN deployments
- Exposure to cloud networking (AWS/Azure)
Work Model Requirements
- Remote role within India.
- Mandatory alignment with U.S. EST time zone.
- Participation in production change windows.
- Customer interaction and deployment ownership required.
What We Are Looking For
- Routing-first mindset.
- Strong troubleshooting instincts.
- Confident in customer calls.
- Deployment ownership mentality.
- Clear documentation and RCA discipline.
Requirements
Required Technical Qualifications
- Minimum CCNP or Equivalent (Mandatory)
- 6+ years of enterprise networking experience
- Strong BGP implementation experience
- Hands-on Fortinet firewall deployments
- Cisco ASA configuration experience
- IPSec VPN troubleshooting expertise
- Experience in customer-facing roles
Preferred Qualifications
- CCNP Security or CCIE (Preferred but not mandatory)
- Fortinet NSE certification
- Experience with SD-WAN deployments
- Exposure to cloud networking (AWS/Azure)
Work Model Requirements
- Remote role within India.
- Mandatory alignment with U.S. EST time zone.
- Participation in production change windows.
- Customer interaction and deployment ownership required.
What We Are Looking For
- Routing-first mindset.
- Strong troubleshooting instincts.
- Confident in customer calls.
- Deployment ownership mentality.
- Clear documentation and RCA discipline.
Skills Required
- Minimum CCNP or Equivalent
- 6+ years of enterprise networking experience
- Strong BGP implementation experience (iBGP/eBGP/route reflectors/route-maps)
- Hands-on Fortinet firewall deployments (FortiGate, HA, IPSec/SSL VPN, SD-WAN)
- Cisco ASA configuration and AnyConnect experience
- IPSec VPN troubleshooting expertise (phase1/phase2, policy/route-based)
- Experience in customer-facing roles and OEM TAC or escalations
- Packet capture and TAC-level debugging (Wireshark, tcpdump, device debug)
- VLAN, trunking (802.1Q), STP/RSTP, port-channel and inter-VLAN routing
- Remote role within India and mandatory alignment with U.S. EST time zone (participation in change windows)
- Experience with MPLS, VRF segmentation, route filtering and prefix-lists
- Ability to debug routing issues from packet-capture level
- CCNP Security or CCIE
- Fortinet NSE certification
- Experience with SD-WAN deployments
- Exposure to cloud networking (AWS/Azure)
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Onemind Services LLC is a full-service Managed Service Provider (MSP) and Cloud Service Provider (CSP) specializing in cloud, security, Internet of Things (IoT), and data center technologies. The company focuses on unifying technology, security, and innovation through cloud-native solutions, automation, and observability to help businesses scale, secure, and thrive, offering services including Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS).
