Lead Network Engineer

Job Description

Lead Network Administrator

Location: Bangalore

Experience: 6 – 11years

Role Summary

We are hiring a Lead Network Administrator responsible for end-to-end

implementation, hardening, and management of our enterprise network and security

infrastructure. The candidate must have strong hands-on experience in Palo Alto

Firewalls, Netskope Secure Web Gateway, Aruba NAC (ClearPass), Aruba Central,

Cisco/Aruba Switching, and must ensure the environment remains secure,

hardened, and vulnerability-free.

Core Responsibilities

1. Palo Alto Firewall – End-to-End Ownership

• Full implementation and management of Palo Alto Next-Generation Firewalls

across all locations.

• Configure and optimize:
• Security policies
• NAT policies
• App-ID, User-ID
• SSL decryption
• Threat profiles
• Manage GlobalProtect VPN, HIP-based authentication, and regular user access
• reviews.
• Perform device hardening, config audits, best-practice alignment, and

vulnerability remediation.

• Plan and execute firmware upgrades and ensure stability, performance, and
• compliance.
• Monitor traffic patterns, threats, content updates, and ensure continuous

protection.

2. Secure Web Gateway – Netskope

• Manage Netskope Secure Web Gateway for secure internet access, DLP, and

advanced threat protection.

• Implement policies for URL filtering, SSL inspection, CASB access, and user protection.
• Troubleshoot Netskope agent issues, policy mismatches, and connectivity problems.
• (Optional/Future) Support Netskope ZTNA implementation if procured.

3. Network Access Control – Aruba ClearPass

• Configure and manage ClearPass NAC for 802.1X, MAC authentication, profiling, and onboarding.
• Enforce identity-based access and continuous security checks.
• Troubleshoot NAC authentication and endpoint posture issues.

4. Wireless and Switching – Aruba & Cisco

• Manage Aruba APs via Aruba Central—SSID setup, wireless security, RF optimization.
• Configure and maintain Cisco and Aruba switches (VLANs, routing, trunking,STP, ACLs).
• Enforce full device hardening, secure configs, and patch management for switching/WLAN.

5. WAN, Routing & Cloud Connectivity

• Manage AWS Direct Connect, VPN tunnels, and office–cloud connectivity.
• Troubleshoot MPLS, BGP routing, latency, and inter-site network flows.
• Work with ISPs for bandwidth, routing optimization, and uptime SLAs.

6. Network Hardening & Security Posture

Ensure zero vulnerabilities across all network devices through continuous

hardening.

• Perform configuration reviews, compliance checks, and timely patching.
• Conduct RCA for network/security incidents and drive long-term corrective actions.
• Maintain endpoint network security integration with firewall/NAC/SWG.

7. Automation & Lifecycle Management

• Automate network tasks using scripting/tools (where applicable).
• Perform periodic firmware and OS upgrades for all network/security devices.
• Maintain version standards aligned with industry recommendations.

Key Skills & Experience

6–9 years in enterprise networking with strong hands-on exposure.

Expertise in:

o Palo Alto Firewalls (mandatory)

o Netskope SWG (mandatory)

o Aruba ClearPass NAC (mandatory)

o Aruba Central & APs

o Cisco / Aruba switching

o VPNs, BGP, MPLS

• Strong troubleshooting across OSI layers 1–7.
• Proven experience with network hardening and vulnerability remediation.
• Ability to independently manage and secure medium/large-scale network environments.