Senior Network Engineer (SD-WAN)

Role Summary - As a Senior SD-WAN Engineer, your primary goal is to move the organization away
from rigid, legacy hardware and toward a fluid, software-defined ecosystem. You aren't just "fixing
routers"—you are the architect of a global fabric that connects branches, data centers, and multi-
cloud environments (AWS/Azure/Alkira) into one seamless, secure entity.
This role will be instrumental in designing, implementing, and managing solutions that protect
enterprise users, applications, and data in a modern, cloud & on-prem environment. The engineer
will work closely with architecture, security, operations, and vendors to ensure high-quality,
scalable, and secure access.
This position is based in Bengaluru (India) and supports global business units across regions.
Our Team - The KOCH Technologies Infrastructure team provides reliable, flexible, and secure
connectivity solutions that enable business solutions and perpetual transformation. We manage
network and network security infrastructure, including wide area networking, local area networking,
wireless, firewalls, datacentre networking, load balancing, endpoint security, and proxies. We
provide enterprise infrastructure monitoring for IT components across the enterprise. We are
currently focused on the following transformation strategies: talent, proactive management, process
optimization and automation, security by design, and adopting a service focused organization.
Key Responsibilities
 Design & Standards Leadership: You don’t just follow templates; you build them. You’ll be
responsible for developing new global standards for the network, creating high-level designs
(HLD), and ensuring every site rollout follows a clean, documented blueprint (LLD).
 Cisco & Meraki Mastery: You’ll live in the "Command Centers"—Cisco vManage for the
complex Viptela enterprise sites and the Meraki Dashboard for lean branch deployments.
You’ll be the go-to expert for configuring global control policies, managing the vSmart
controllers, and ensuring the fabric stays healthy.
 The Wireless Experience: Beyond the WAN, you’ll own the Meraki Wireless environment.
This means designing high-density Wi-Fi layouts, managing SSID policies, and ensuring
seamless roaming and connectivity for users across the office.
 Deep-Dive Routing: While SD-WAN simplifies things, the "underlay" is still complex. You’ll
need a master-level understanding of BGP, OSPF, and EIGRP to ensure that traffic flows
correctly between your new SD-WAN tunnels and existing legacy circuits.
 Security Integration & SOC Collaboration: You’ll bridge the gap between Networking and
Security. This includes deploying and managing Palo Alto, Cisco FTD (Firepower), and
FortiGate firewalls. You’ll work closely with the SOC to implement real-time security
measures, IPS/IDS, and threat-prevention policies.
 Cloud & Next-Gen Connectivity: You’ll lead the "Cloud On-Ramp" strategy. Whether it’s
connecting to AWS Transit Gateways, Azure Virtual WAN, or using Alkira to stitch together
multi-cloud environments, you make sure the cloud feels like it's part of the local network.
 Full-Stack Troubleshooting: When things break, you’re the "Level 3" expert. You’ll handle
complex issues across the entire Cisco stack—from Catalyst switching and Wireless
Controllers (WLC) to global routing loops.

 Automating the Boring Stuff: You’ll use Python or Ansible to automate repetitive tasks.
Instead of manual clicks, you’ll write scripts to push bulk configuration changes, pull health
reports, or integrate the network with other business tools.
Automation & Quality Improvement
 Contribute to automation and standardization efforts (Ansible, Terraform, APIs).
 Identify inefficiencies and drive process, quality, and documentation improvements.
 Participate in design reviews, quality checks, and peer mentoring.
Stakeholder & Vendor Engagement
 Work directly with internal customers, project managers, and global stakeholders.
 Coordinate with OEMs, and system integrators for implementation and issue resolution.
 Provide clear communication on project status, risks, and dependencies.
Required Qualifications
 SD-WAN: Cisco (Viptela), Meraki.
 Security: Palo Alto, Cisco FTD, Fortinet, IPsec/SSL protocols.
 Cloud: AWS, Azure, Alkira (Multi-cloud networking).
 Infrastructure: Cisco Catalyst (LAN), Meraki & Cisco Wireless.
 DevOps: Python, Ansible, or API-based automation.
 Familiarity with SIEM/Observability tools (e.g., Splunk, Grafana, LogicMonitor).
Soft Skills
 Strong problem-solving and troubleshooting abilities
 Excellent communication and stakeholder management
 Ability to work in a fast-paced, collaborative environment
 Proactive mindset with focus on continuous improvement
What Will Put You Ahead (Nice to Have – Not Mandatory)
 Exposure to network automation (Python, Ansible, DevNet concepts).
 Knowledge of cloud platforms such as AWS, Azure, or GCP.
 An open-minded individual who embraces challenges positively, KOCH Fit.
 Experience working in global delivery or follow-the-sun models.
Work & Support Expectations
 Participation in on-call rotations as part of a global team.
 Availability for planned weekend or off-hours work during major implementations or
migrations.
 Strong documentation discipline to support global operations handover.