About this role

Job Description: Senior Network Administrator (VPN, Zero Trust & Network Security)

Experience

8-12 Years

Location : Pune , Hybrid

Role Summary

Seeking an experienced Senior Network Administrator to manage, secure, and optimize enterprise network infrastructure with a strong focus on VPN technologies, Zero Trust Network Access (ZTNA), network security, and enterprise connectivity . The ideal candidate will possess expertise in routing, switching, firewalls, SD-WAN, VPN solutions, NAC, and modern Zero Trust architectures while ensuring high availability, security compliance, and operational excellence.

---

Key Responsibilities

Network Infrastructure Management

- Design, implement, and administer enterprise LAN, WAN, Wireless, and Data Center networks.
- Manage routers, switches, load balancers, wireless controllers, and Internet connectivity.
- Perform network capacity planning, performance tuning, and infrastructure upgrades.
- Ensure network availability aligned with defined SLAs.

VPN & Remote Access Management

- Configure and support IPSec, SSL VPN, Site-to-Site VPN, and Client VPN solutions.
- Manage remote access platforms from vendors such as Cisco, Palo Alto, Fortinet, Check Point, or Zscaler.
- Troubleshoot VPN connectivity, authentication, performance, and access-related issues.
- Implement secure remote workforce solutions.

Zero Trust Network Access (ZTNA)

- Design and administer ZTNA solutions to enable secure application access.
- Implement identity-based access controls and least-privilege principles.
- Integrate ZTNA platforms with IAM, MFA, Conditional Access, and Endpoint Security solutions.
- Support technologies such as: Zscaler ZPA
- Palo Alto Prisma Access
- Netskope
- Cisco Secure Access
- Cloudflare Zero Trust

Network Security

- Administer next-generation firewalls (NGFW) and security platforms.
- Create and maintain security policies, ACLs, NAT, IPS/IDS rules.
- Monitor network security events and collaborate with SOC teams.
- Conduct vulnerability remediation and security hardening activities.
- Support DDoS protection, segmentation, and micro-segmentation initiatives.

Operations & Incident Management

- Handle L2/L3 complex network incidents and problem management activities.
- Perform root cause analysis (RCA) and implement preventive measures.
- Participate in major incident management and change management processes.
- Maintain operational documentation, SOPs, and knowledge repositories.

Cloud & Hybrid Networking

- Manage networking across Azure, AWS, and hybrid environments.
- Configure VNETs, VNets Peering, Transit Gateways, Virtual WAN, and VPN Gateways.
- Support secure cloud access using ZTNA and SASE principles.

Monitoring & Automation

- Utilize monitoring tools such as SolarWinds, PRTG, LogicMonitor, ThousandEyes, or Observability platforms.
- Automate routine networking tasks using PowerShell, Python, Ansible, or APIs.
- Generate network health reports and executive dashboards.

---

Required Technical Skills

Networking

- TCP/IP, DNS, DHCP, BGP, OSPF, EIGRP
- VLANs, STP, HSRP, VRRP
- MPLS, SD-WAN, WAN Optimization
- Network Load Balancing

Security

- Zero Trust Architecture
- SASE Framework
- VPN Technologies (IPSec, SSL VPN)
- IDS/IPS
- NAC (Cisco ISE, Aruba ClearPass)
- Network Segmentation & Microsegmentation

Firewall & Security Platforms

- Palo Alto
- Cisco Firepower / ASA
- Fortinet FortiGate
- Check Point
- Zscaler
- Netskope

Cloud Networking

- AWS Networking
- Azure Networking
- Hybrid Connectivity
- Secure Access Service Edge (SASE)

Monitoring Tools

- SolarWinds
- PRTG
- LogicMonitor
- ThousandEyes
- Splunk
- Grafana

---

Desired Certifications

- CCNP Enterprise / CCIE
- PCNSE (Palo Alto)
- NSE 4/5/7 (Fortinet)
- Zscaler Certified Administrator
- Cisco Secure Access Certification
- Azure Network Engineer Associate (AZ-700)
- AWS Advanced Networking Specialty
- CISSP (Preferred)

---

Soft Skills

- Strong analytical and troubleshooting capabilities.
- Excellent stakeholder and executive communication skills.
- Experience in client-facing managed services environments.
- Ability to lead technical bridges during critical incidents.
- Mentoring junior engineers and driving operational improvements.

---

Preferred Industry Experience

- Managed Services (MSP)
- Global Capability Centers (GCC)
- Enterprise IT Infrastructure
- Healthcare, Manufacturing, BFSI, Retail, and Technology sectors