More jobs:
Job Description & How to Apply Below
Location: Bengaluru
EXP - 5-7 yrs
Immediate joiners only
Description
Key Responsibilities
- Design, implement, and optimize Forti Gate‑based SD‑WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security: zones, objects, policies, NAT (central NAT), UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site‑to‑site VPNs (route/policy‑based), IPsec HA, and hub‑and‑spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST, VLANs, link aggregation (LACP/Ether Channel), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter‑VLAN routing, and east‑west policies across access/distribution with clear zone models.
- Implement high availability:
Forti Gate A‑P/A‑A clusters, dual‑homed uplinks, first‑hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation: HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry: SNMP, Net Flow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning, and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP, and audit/compliance requirements.
- Contribute to automation (nice‑to‑have):
Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier‑3/4 escalation support and participate in on‑call as needed.
Responsibilities
Key Responsibilities
- Design, implement, and optimize Forti Gate‑based SD‑WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security: zones, objects, policies, NAT (central NAT), UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site‑to‑site VPNs (route/policy‑based), IPsec HA, and hub‑and‑spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST, VLANs, link aggregation (LACP/Ether Channel), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter‑VLAN routing, and east‑west policies across access/distribution with clear zone models.
- Implement high availability:
Forti Gate A‑P/A‑A clusters, dual‑homed uplinks, first‑hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation: HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry: SNMP, Net Flow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning, and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP, and audit/compliance requirements.
- Contribute to automation (nice‑to‑have):
Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier‑3/4 escalation support and participate in on‑call as needed.
Qualifications
Key Responsibilities
- Design, implement, and optimize Forti Gate‑based SD‑WAN (business intent overlays, SLA policies, application steering, local breakout).
- Engineer and maintain Firewall security: zones, objects, policies, NAT (central NAT), UTM profiles, SSL inspection, IPS/DoS policies, logging.
- Plan and deploy site‑to‑site VPNs (route/policy‑based), IPsec HA, and hub‑and‑spoke topologies alongside Internet/MPLS underlays.
- Lead campus switching design: STP/RSTP/MST, VLANs, link aggregation (LACP/Ether Channel), access control, QoS marking, storm control.
- Build L3 segmentation (VRFs), inter‑VLAN routing, and east‑west policies across access/distribution with clear zone models.
- Implement high availability:
Forti Gate A‑P/A‑A clusters, dual‑homed uplinks, first‑hop redundancy (VRRP/HSRP/GLBP as applicable).
- Create and maintain network documentation: HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks.
- Establish monitoring & telemetry: SNMP, Net Flow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks.
- Drive capacity planning, performance tuning, and proactive lifecycle management (firmware, images, templates).
- Collaborate with security, apps, and infra teams for change planning, DR/BCP, and audit/compliance requirements.
- Contribute to automation (nice‑to‑have):
Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations.
- Provide Tier‑3/4 escalation support and participate in on‑call as needed.
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
×