Network Engineer Team Lead

Company Profile

Our client is a global IT services company that helps businesses with digital transformation with offices in India and the United States. It helps businesses with digital transformation, provide IT collaborations and uses technology, innovation, and enterprise to have a positive impact on the world of business.

With expertise is in the fields of Data, IoT, AI, Cloud Infrastructure and SAP, it helps accelerate digital transformation through key practice areas - IT staffing on demand, innovation and growth by focusing on cost and problem solving.

Job Profile

: Lead Network Engineer L3

Location:

Bangalore

Employment Type

: Full-Time

Preferred experience:

8+ years The Role

We are looking for a hands-on Lead Cloud Network Engineer to design, implement, secure, and automate network, egress, and edge services on Azure. The ideal candidate will have strong hands-on expertise in core networking with strong foundational knowledge on networking and security with good experience in Azure networking services, hybrid connectivity, network security, and performance optimization.

You will apply your strong Cisco routing/switching and security skills as your base to own routing(Cisco), Azure network services (Firewall)to implement Azure Firewall controls, optimize Azure CDN & Azure Front Door, secure web access by administer Squid and Skyhigh Secure Web Gateway/Proxy, manage allow/deny lists, and own operational lifecycle tasks such as TLS certificate renewals and AMI/image upgrades for network/security appliances. You will codify everything possible with Terraform and drive resilient, observable, and compliant operations. You will also implement monitoring and alerting frameworks and enforce Azure Policy and Governance for compliance.

Responsibilities

Architecture & Design

Design cloud and hybrid network architectures (Hub-Spoke / vWAN models).

Plan IP addressing, route tables (UDR), network segmentation, and peering strategies.

Define secure ingress/egress patterns using Azure Firewall and NSGs.

Architect Azure Front Door and CDN for global traffic management and performance optimization.

Establish secure internet access using proxies (Squid / SWG).

Implementation & Operations

Configure and manage Cisco routing (BGP, OSPF, ECMP, VRFs).

Deploy and manage Azure networking components:

oVNets, Subnets, NSGs, Route Tables oLoad Balancers, Application Gateway oVPN Gateway, ExpressRoute, Virtual WAN

Implement Azure Firewall, WAF, Front Door, CDN for high availability and security.

Manage DNS, Private Endpoints, and Network Peering.

Troubleshoot connectivity, latency, and routing issues across environments.

Security & Compliance

Implement Zero Trust architecture and network segmentation.

Manage whitelisting/blacklisting (URLs, IPs, FQDNs) across firewall, proxy, and WAF.

Handle TLS/SSL certificate lifecycle management.

Ensure compliance with security standards and policies (RBAC, ITIL).

Support incident response, RCA, and vulnerability remediation.

Automation & IaC

Develop and manage Terraform modules for Azure infrastructure.

Implement CI/CD pipelines (Azure DevOps / GitHub Actions) for IaC deployment.

Automate operations using PowerShell, Python, or Bash.

Enable monitoring and observability using Azure Monitor, Log Analytics, and SIEM tools.

Monitoring & Performance Optimization

Monitor network performance using Azure Monitor, Network Watcher, Traffic Analytics.

Optimize latency, availability, and cache performance (CDN/Front Door).

Troubleshoot L3–L7 issues using logs, packet capture, and telemetry tools.

Collaboration & Governance

Collaborate with cloud architects, security teams, and DevOps teams.

Maintain documentation, runbooks, and architecture diagrams.

Provide L3 support and knowledge transfer to teams.

Must - Have Qualifications:

Minimum 8+ years of experience in networking, cloud, and security engineering

Strong expertise in Azure networking services and hybrid connectivity

Hands-on experience with Terraform (IaC)

Strong understanding of network protocols (BGP, OSPF, TCP/IP)

Experience in cloud security, WAF, Firewall, and proxy technologies

Experience with Fortinet / CheckPoint firewalls

Experience in Zero Trust Architecture implementation

Preferred Qualifications

Exposure to SIEM tools (Splunk, Sentinel, Grafana)

Relevant Azure / Networking certifi