HCLTech is seeking two experienced professionals under one integrated critical role covering hybrid cloud and enterprise networking, multi-vendor firewall and VPN engineering, and controlled change execution. The team will provide senior technical ownership across on-premises, data-center and public-cloud environments, resolve complex incidents, lead root-cause analysis, deliver high-risk changes, strengthen security and operational resilience, and mentor L1/L2 engineers.
Experienced Change Management and Cloud Level 3 (L3) Network Engineer to serve as the highest technical escalation point for our enterprise and data center network estate, spanning on-premises infrastructure and public cloud (Azure, AWS, and/or GCP). The successful candidate will own complex incident resolution, network architecture and design input, change implementation, and root-cause analysis across routing, switching, WAN/MPLS, data center fabric, and cloud networking domains. This is a senior, hands-on role that combines deep protocol-level troubleshooting with design ownership and mentoring of L1/L2 engineers. Primary Skills (Must-Have) Cloud Networking (Azure / AWS / GCP) • Design and operate cloud network architectures on at least one major provider, with working knowledge of at least two: ▪ Azure — VNets, VNet peering, ExpressRoute, Azure Firewall, NSGs/UDRs, Virtual WAN, Private Link/Private Endpoints, Load Balancer/Application Gateway. ▪ AWS — VPCs, Transit Gateway, Direct Connect, VPC peering, Route 53, Security Groups/NACLs, PrivateLink, NAT/Internet Gateways, ELB/NLB. ▪ GCP — VPCs, Cloud Router, Cloud Interconnect, VPC peering, Cloud NAT, Cloud Load Balancing, firewall rules. • Hybrid connectivity design and troubleshooting (site-to-cloud VPN, dedicated interconnect, SD-WAN to cloud on-ramps). • Cloud routing integration with on-prem BGP peering and route propagation. WAN & Service Provider Routing • MPLS: L3VPN/L2VPN, VRFs, MP-BGP, route distinguishers/route targets, PE-CE routing, QoS across the WAN, and troubleshooting provider MPLS services. • BGP: eBGP/iBGP design and operation, route reflectors, communities, AS-path and prefix-list policy, route filtering, path selection/manipulation, dampening, and large-scale BGP troubleshooting. Interior Routing (IGP) • OSPF: multi-area design, area types (stub/NSSA), LSA types, DR/BDR behavior, route summarization, redistribution, and convergence tuning. • Working knowledge of additional IGPs (e.g., IS-IS, EIGRP) is an advantage. • Route redistribution and mutual redistribution between IGP/BGP/MPLS with loop prevention. Enterprise LAN & Switching • Campus/enterprise LAN design and operations: VLANs, STP/RSTP/MSTP, VTP, EtherChannel/LAG, inter-VLAN routing. • First-hop redundancy protocols (HSRP/VRRP/GLBP). • Access-layer security: 802.1X, port security, DHCP snooping, dynamic ARP inspection. • Wireless LAN fundamentals (controller-based and cloud-managed) an advantage. Data Center (DC) Networking • Data center fabric design and operations: spine-leaf architectures, VXLAN/EVPN, overlay/underlay networking. • DC technologies such as Cisco ACI, Nexus (NX-OS), vPC, and fabric troubleshooting. • Understanding of DC interconnect (DCI), workload mobility, and east-west/north-south traffic patterns. Secondary / Supporting Skills • Network Security: Firewalls (Palo Alto, Cisco ASA/Firepower, Fortinet, Check Point), IPsec/GRE VPNs, ACLs, zone-based policy, NAT. • SD-WAN: Meraki, Versa, or equivalent. • Network Services: DNS, DHCP, NTP, IPAM. • Automation & Tooling: Python and/or Ansible for network automation; familiarity with REST APIs, Terraform (for cloud networking), Git. • Monitoring & Observability: SolarWinds, PRTG, ThousandEyes, NetFlow/sFlow, syslog/SNMP, packet capture and analysis (Wireshark, tcpdump). • QoS: design and troubleshooting across LAN/WAN. • IPv4/IPv6: addressing, subnetting, and dual-stack operations. Key Responsibilities • Act as the final internal escalation point (L3) for complex, high-severity network incidents across LAN, WAN/MPLS, data center, and cloud. • Perform deep root-cause analysis (RCA) and produce post-incident reports with permanent corrective actions. • Design, review, and validate network changes; own high-risk change implementation during maintenance windows. • Contribute to network architecture
Supporting Skills
Position 1 Deliverables
Source: HCLTech careers — Read the original posting and apply
This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.
HCLTech is an employer in the IT/Computers - Software, Software Services sector with operations in India. This is a directory listing maintained by Kaam Ki Khoj so that candidates can find the organisation; it is not an official company page and Kaam... Read More
Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.
