TITLE: Senior Network Engineer
REPORTING To: CoE Network Manager
WORKING LOCATION: Bengaluru
SUMMARY OF ROLE AND OBJECTIVES:
The Infrastructure Lead – IT is an intermediate-senior technical contributor within the CoE Network team responsible for end-to-end project delivery, execution of complex network initiatives, and operational excellence across Eurofins network landscape. This role carries a strong emphasis on project delivery, on-time execution, and stakeholder management, while contributing hands-on technical expertise across multi-vendor network and security platforms.
The engineer will work closely with Level 3 engineers, architects, and regional teams/IT zones to deliver network projects, drive change, and support operational escalations in line with ITIL methodology and Eurofins Policies & Procedures (ENNA – Eurofins Normalised Network Architecture).
Project Delivery (Primary Focus)
A senior technical resource within the team who can manage complex networks including datacentres.
Own and deliver assigned network infrastructure projects end-to-end — from initiation, planning, design validation, execution, testing, cutover, to hyper care and handover.
Drive on-time, on-scope, and on-quality delivery of global and regional projects including new site build-outs, datacentre migrations, firewall refresh/migration programs, SD-WAN rollouts, VoIP integrations, WAF deployments, and Zero Trust initiatives.
Create and maintain project artefacts: Low-Level Designs (LLDs), High-Level Designs (HLDs), Bill of Materials (BoM), implementation plans, rollback plans, test plans, and Run/Operate documentation.
Coordinate with cross-functional teams (Security, Cloud, Service Desk, Regional IT, Vendors, ISPs) to remove blockers and ensure milestone adherence.
Provide regular project status updates, RAID logs (Risks, Assumptions, Issues, Dependencies), and escalations to the CoE Network Manager and IT Infrastructure leadership.
Contribute to capacity planning, lifecycle management, and technology refresh roadmaps.
Operations, Incident & Change Management
Manage the CoE Network ITSM queue — triage, troubleshoot, and resolve Network Incidents (with focus on P1/P2/P3).
Fulfil Network Service Requests including new device installation, configuration changes, and documentation updates.
Own and manage Network Changes following Eurofins Change Management Process (RFC creation, CAB presentation, implementation, and post-implementation review).
Participate in Problem Management and SWOT analysis to drive proactive service improvements.
Support technical escalations and elevated support to maintain SLAs.
Standards, Documentation & Governance
Contribute to the creation and review of Key Group Documents, SOPs, Work Instructions, and Guidelines aligned with ENNA standards.
Deliver services following ITIL methodology — IT Service Cards, SOPs/WIs, Training, and Service Transition.
Required Technical Skills
Network Security (Strong Emphasis — Multi-Vendor)
Check Point Firewalls & MDSM (Multi-Domain Security Management) — policy management, VSX, clustering, upgrades, migrations.
Fortinet FortiGate — FortiManager, FortiAnalyzer, SD-WAN features, SSL VPN, IPSec.
Palo Alto Networks — Panorama, NGFW features, App-ID, User-ID, GlobalProtect, Prisma.
Cisco Secure Firewall (Firepower/FTD/ASA) — FMC, threat policies, migrations from ASA to FTD.
Web Application Firewalls (WAF) — hands-on with Cloudflare, AWS WAF, Azure WAF, F5 ASM/Advanced WAF, or Imperva.
Cloudflare — DNS, CDN, WAF, Zero Trust / Cloudflare Access, DDoS protection, Magic Transit (desirable).
Experience with DDoS mitigation, IPS/IDS, TLS inspection, and modern Zero Trust / SASE architectures.
Routing & Switching
Cisco — Catalyst (29xx/3xxx/9xxx), Nexus (5K/7K/9K), ASR, ACI (desirable), IOS/IOS-XE/NX-OS.
Juniper switching — EX/QFX series, Junos OS, virtual chassis, EVPN-VXLAN (desirable).
HPE/Aruba and Dell switching platforms.
Deep knowledge of Layer 2/3 protocols — VLAN, STP/RSTP/MSTP, LACP, OSPF, EIGRP, BGP, MPLS, VRF, multicast.
Routing convergence optimisation and traffic engineering.
WAN, SD-WAN & Connectivity
SD-WAN — Arista VeloCloud (primary), with awareness of Cisco Viptela / Versa / Fortinet SD-WAN.
MPLS, Internet breakout design, hybrid WAN, DIA circuits.
VPN technologies — IPSec (policy & route-based), SSL VPN, Remote Access VPN, DMVPN.
Wireless
Cisco Wireless (WLC, LAP/CAPWAP, Autonomous APs), Cisco Meraki, Aruba, Aerohive/HiveManager.
Load Balancing & Application Delivery
A10 (preferred), F5, KEMP — VIPs, SSL offload, persistence, health monitors, iRules/aFleX basics.
Voice & Collaboration
Cisco Call Manager, Cisco Unity, UCS, and cloud-based telephony (RingCentral, MS Teams Voice awareness).
Authentication & Access
RADIUS, TACACS+, Cisco ISE/ACS, 802.1X, NAC fundamentals.
Cloud & Modern Networking
Networking in AWS / GCP / Azure (VPC/VNet, Transit Gateway, VNet Peering, ExpressRoute, Direct Connect).
Infrastructure-as-Code familiarity (Terraform, Ansible) for network automation.
Monitoring & observability tools — SolarWinds, PRTG, ThousandEyes, Splunk.
QoS, Traffic Engineering & Tools
QoS, queuing, traffic shaping, policy management.
Packet capture & analysis (Wireshark, tcpdump).
Personal Qualities / Profile
Project-focused — able to drive tasks to completion under tight deadlines.
Autonomous, proactive, analytical, and rigorous.
Business-focused with strong risk sensitivity.
Excellent coordination skills — able to work across individuals, teams, vendors, and geographies.
Strong written and verbal communication.
Comfortable operating in a tightly controlled change-managed environment.