Senior Network Engineer-US

This is a remote position.

About the Role
We are hiring a highly technical Senior Network Engineer with strong experience in customer deployments (Greenfield and Brownfield environments). The ideal candidate should have prior experience in an OEM TAC environment (Cisco, Juniper, Fortinet) or at a high-end system integrator handling escalations and complex troubleshooting.

This role focuses on:
- Customer network deployments
- Production migrations
- Firewall and routing implementations
- Advanced routing design and troubleshooting
- Enterprise VPN architectures

The candidate must be a routing champion with deep protocol-level understanding and real-world implementation experience.

Primary Responsibilities

1. Customer Deployments (Primary Focus)

- Lead Greenfield network deployments.
- Execute Brownfield migrations with minimal downtime.
- Performfirewallcutovers and routing transitions.
- Design and implement secure WAN architectures.
-Participatein customer change windows aligned to U.S. hours.

2. Routing (Deep Expertise Required)

Strong hands-on implementation and troubleshooting experience with:

- BGP (iBGP, eBGP, route reflectors, route maps)
- OSPF (multi-area, LSA troubleshooting)
- Static routing & policy-based routing
- Redistribution strategies
- VRF segmentation
- MPLS fundamentals
- Route filtering and prefix lists

Must be able to debug routing issues from packet capture level.

3. Firewall & Security Platforms

Hands-on deployment and troubleshooting:

Fortinet (Strongly Preferred)

- FortiGate deployment
- HA clustering
- IPSec VPN configuration
- SSL VPN
- Policy optimization
- NAT policies
- SD-WAN configuration

Cisco ASA

- ASA firewall configuration
- Site-to-site IPSec VPN
- Remote access VPN
- AnyConnect deployment
- ACL and NAT troubleshooting

Experience with Juniper SRX or other enterprise firewalls is a plus.

4. VPN Technologies

- Site-to-site IPSec VPN
- Remote access VPN
- SSL VPN
- Policy-based and route-based VPNs
- Phase 1 / Phase 2 troubleshooting
- Encryption domain mismatches

Originally posted on Himalayas