Network Engineer

Tata Consultancy Services Limited

Cary, NC, United States

about 1 month ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Compensation

$90,000.0 - $130,000.0

Working hours

Regular working hours

Job source

www.indeed.com

Tech stack

Microsoft Windows Active Directory Amazon Web Services Amazon Elastic Compute Cloud Amazon S3 Apple IOS Systems Engineering Microsoft Azure Bash Shell Border Gateway Protocol Spanning Tree Protocols Cloud Computing

+57 more

Cyber Security Data Centers Dynamic Host Configuration Protocol Linux Domain Name System (DNS) Multi-Factor Authentication Enhanced Interior Gateway Routing Protocol VMware ESX Servers Hyper-V Identity and Access Management Networking Hardware Intrusion Detection Systems Virtual Private Networks (VPN) Python (Programming Language) Lightweight Directory Access Protocols (LDAP) Log Analysis Routing Network Segmentation Open Shortest Path First (OSPF) Overlay Transport Virtualization Performance Tuning Public Key Infrastructure Windows PowerShell Azure Active Directory Ansible Prometheus Zero Trust Network Access Security Information and Event Management Single Sign-On Virtualization Technology Software Vulnerability Management Wide Area Networks SSL Certificate Management Data Logging Scripting Google Cloud Load Balancing Cloud Platform System In-Plane Switching (IPS) Nx-os Grafana QRadar Firewalls (Computer Science) Juniper Cloudformation Containerization Gitlab-ci Kubernetes Vcenter Fortinet CIS Benchmarks Cloudwatch Terraform Splunk Cisco Docker Vmware

Job description

Core Network Engineering Duties

Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking).
Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN).
Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles.
Implement network telemetry, logging, and packet-capture visibility solutions.
Ensure network resiliency, redundancy, and capacity planning across environments.
Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs).
Perform network performance troubleshooting, service restoration, and RCA documentation.
Manage network device lifecycle: refresh planning, patching, fi rmware, IOS/NX-OS upgrades.

Core Systems Engineering Duties

Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V).
Configure and optimize system performance, storage, virtualization, and backups.
Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents).
Deploy and manage containers, Kubernetes, orchestration systems.
Implement secure system baselines (CIS, NIST 800-53, DISA STIGs).
Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management.
Support patching, OS hardening, system logging, FIM, vulnerability remediation.
Conduct performance and health monitoring of critical compute resources and services.

Cybersecurity & Compliance Responsibilities

Integrate network/sys logs into SIEM platforms following CIM or standardized schema.
Implement network and system controls supporting ISO27001, or NIST RMF compliance.
Support incident response through data collection, log analysis, containment actions, and implementing
compensating controls.
Manage access controls, least-privilege enforcement, and identity integrations for infrastructure.
Support audit evidence collection and configuration/state reporting.

Requirements

Must Have Technical/Functional Skills Network Engineering

Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN).
Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet.
Expertise in firewalls, VPNs, network segmentation, IDS/IPS.
Cloud networking (AWS VPCs, PrivateLink, TGW; Azure VNets; GCP VPCs).
Familiarity with SD-WAN, load balancing, and NAC solutions.

Systems Engineering

Linux and Windows administration expertise.
Virtualization platforms (VMware ESXi/vCenter, Hyper-V).
Cloud systems management (AWS EC2/EBS/EFS/RDS; Azure IaaS; GCP Compute).
Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO.
Containerization (Docker, Kubernetes, EKS/AKS/GKE).

Cybersecurity & Compliance Skills

Knowledge of NIST 800-53, RMF, CIS benchmarks, DISA STIG hardening.
Experience integrating logs into SIEM platforms (Splunk, QRadar, Elastic).
Familiarity with IAM, MFA, Zero Trust, segmentation models.
Ability to support SOC incident response activities.

Automation & Tooling

Scripting skills: Python, Bash, PowerShell.
Automation: Ansible, Terraform, CloudFormation, GitLab CI/CD.
Knowledge of monitoring frameworks (Prometheus, Grafana, CloudWatch).
Proficiency in leveraging Artificial Intelligence (AI) to drive innovation and efficiency within technical domains.