Senior System Engineer

Configure and Deploy (LAN, WAN, WLAN) for enterprise environments.Should have understanding of Switch stacking, configuration, implementation, troubleshooting, and deployment of networking protocols such as static route, default route, OSPF, EIGRP, BGP.Working experience in configuring, manage and troubleshoot on VLANs, STP, RSTP,RPVST+,trunking,Port-channel,ssh,Telnet,snmp and Layer 2/Layer 3 switching is mandatory.Proficient in switch configuration and VLT (Virtual Link Trunking) setup, including redundancy design, link aggregation, and failover implementation for high availability in enterprise networks.Working experience in spine and leaf Architecture.Configure, manage and troubleshoot Sophos firewalls, including security policies, NAT, and VPNs. Practical exposure to Rule management, traffic inspection.Experienced in configuring and troubleshooting SSL VPN connectivity on Sophos firewalls, including user and group-based access control, client deployment, policy management, and resolving connection issues.Hands-on experience with IPsec VPNs, including both policy-based and route-based configurations, ensuring secure site-to-site and remote access connectivityExperienced in configuring and managing Sophos Web Application Firewall (WAF) for securing web applications, including reverse proxy setup, protection policies, SSL offloading, and traffic filtering.Experienced in deploying, managing, and troubleshooting Sophos Endpoint Protection, including policy configuration, threat detection and response, and centralized management via Sophos Central.Skilled in troubleshooting High Availability (HA) issues across both firewall and core network infrastructure, including failover testing, synchronization problems, interface monitoring, and redundancy configuration to ensure minimal downtimeExperienced in performing packet capture and in-depth log analysis on firewalls for diagnosing network issuesExperience with wireless network design, implementation, and troubleshooting.Experience in network monitoring/management tools like PRTG, or similar platforms is preferred.Escalate unresolved issues to senior engineers or vendors, as needed.Perform periodic audits of network devices and provide recommendations for improvements.Maintain comprehensive documentation of network designs, configurations, and troubleshooting steps.Co-Ordination with ISP for any WAN/Internet Circuit alerts SASE Experience – Check Point (ZTNA)Hands-on experience with Check Point Software Technologies SASE (Secure Access Service Edge) solutions, implementing cloud-based security for users and branch connectivity.Configured and managed Zero Trust Network Access (ZTNA) to provide secure, identity-based access to internal applications without traditional VPN. Integrated identity providers (such as Active Directory) for authentication and access control in ZTNA environments.Monitored user activity, logs, and security events using centralized SASE dashboards.Troubleshot connectivity issues, access problems, and policy enforcement in remote access scenarios.Worked on application segmentation, ensuring users can only access authorized applications.Improved overall network security posture by migrating from traditional VPN to Zero Trust architecture. AV & Collaboration Devices Experience – Neat, Kramer & LG SignageStrong understanding of AV integration with network infrastructure including LAN, VLAN, and Wi-Fi environments.Ensured seamless operation of meeting rooms and digital signage systems with minimal downtime. Tools & Technologies:WiresharkNetwork monitoring tools (ex- PRTG)Packet capture/debugFirewall logs checkBasic knowledge of serverNeat pulseLG SignageSecure CRT

Candidate should have CCNE Certification/ CCIE Security training, Certification is not required.