Network Engineer

Tata Consultancy Services Limited
Cary, United States of America
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 130K

Job location

Cary, United States of America

Tech stack

Microsoft Windows
Microsoft Active Directory
Amazon Web Services (AWS)
Amazon Web Services (AWS)
Amazon Web Services (AWS)
iOS
Systems Engineering
Azure
Bash
Border Gateway Protocol
Spanning Tree Protocols
Cloud Computing
Computer Security
Data Centers
Dynamic Host Configuration Protocol
Linux
DNS
Multi-Factor Authentication
Enhanced Interior Gateway Routing Protocol
VMware ESX Servers
Hyper-V
Identity and Access Management
Networking Hardware
Intrusion Detection Systems
Virtual Private Networks (VPN)
Python
Lightweight Directory Access Protocols (LDAP)
Log Analysis
Routing
Network Segmentation
Open Shortest Path First
Overlay Transport Virtualization
Performance Tuning
Public Key Infrastructure
Powershell
Azure
Ansible
Prometheus
Zero Trust Network Access
Security Information and Event Management
Single Sign-On
Virtualization Technology
Software Vulnerability Management
Wide Area Networks
SSL Certificate Management
Data Logging
Scripting (Bash/Python/Go/Ruby)
Google Cloud Platform
Load Balancing
Cloud Platform System
In-Plane Switching (IPS)
Nx-os
Grafana
QRadar
Firewalls (Computer Science)
Juniper
Cloudformation
Containerization
Gitlab-ci
Kubernetes
Vcenter
Fortinet
CIS Benchmarks
Cloudwatch
Terraform
Splunk
Cisco networks
Docker
VMware

Job description

Core Network Engineering Duties

  • Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking).

  • Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN).

  • Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles.

  • Implement network telemetry, logging, and packet-capture visibility solutions.

  • Ensure network resiliency, redundancy, and capacity planning across environments.

  • Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs).

  • Perform network performance troubleshooting, service restoration, and RCA documentation.

  • Manage network device lifecycle: refresh planning, patching, fi rmware, IOS/NX-OS upgrades.

Core Systems Engineering Duties

  • Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V).

  • Configure and optimize system performance, storage, virtualization, and backups.

  • Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents).

  • Deploy and manage containers, Kubernetes, orchestration systems.

  • Implement secure system baselines (CIS, NIST 800-53, DISA STIGs).

  • Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management.

  • Support patching, OS hardening, system logging, FIM, vulnerability remediation.

  • Conduct performance and health monitoring of critical compute resources and services.

Cybersecurity & Compliance Responsibilities

  • Integrate network/sys logs into SIEM platforms following CIM or standardized schema.

  • Implement network and system controls supporting ISO27001, or NIST RMF compliance.

  • Support incident response through data collection, log analysis, containment actions, and implementing

  • compensating controls.

  • Manage access controls, least-privilege enforcement, and identity integrations for infrastructure.

  • Support audit evidence collection and configuration/state reporting.

Requirements

Must Have Technical/Functional Skills Network Engineering

  • Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN).

  • Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet.

  • Expertise in firewalls, VPNs, network segmentation, IDS/IPS.

  • Cloud networking (AWS VPCs, PrivateLink, TGW; Azure VNets; GCP VPCs).

  • Familiarity with SD-WAN, load balancing, and NAC solutions.

Systems Engineering

  • Linux and Windows administration expertise.

  • Virtualization platforms (VMware ESXi/vCenter, Hyper-V).

  • Cloud systems management (AWS EC2/EBS/EFS/RDS; Azure IaaS; GCP Compute).

  • Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO.

  • Containerization (Docker, Kubernetes, EKS/AKS/GKE).

Cybersecurity & Compliance Skills

  • Knowledge of NIST 800-53, RMF, CIS benchmarks, DISA STIG hardening.

  • Experience integrating logs into SIEM platforms (Splunk, QRadar, Elastic).

  • Familiarity with IAM, MFA, Zero Trust, segmentation models.

  • Ability to support SOC incident response activities.

Automation & Tooling

  • Scripting skills: Python, Bash, PowerShell.

  • Automation: Ansible, Terraform, CloudFormation, GitLab CI/CD.

  • Knowledge of monitoring frameworks (Prometheus, Grafana, CloudWatch).

  • Proficiency in leveraging Artificial Intelligence (AI) to drive innovation and efficiency within technical domains.

Apply for this position