Sr. Network Engineer

Overview

Senior Network Engineer on Workday's BT Cloud Engineering team in Pune, India, designing, implementing, managing and troubleshooting complex network infrastructure, with on-call rotation for 24x7 support.

What you'll do

• Design, configure, implement and maintain enterprise network infrastructure, including routers, campus and data center switches, firewalls, wireless access points and related services.
• Design, implement and manage complex BGP routing solutions, including iBGP/eBGP peering, route reflectors, policy-based routing, traffic engineering using communities and other attributes, and troubleshoot BGP convergence and stability issues.
• Lead the design, build-out and ongoing management of Main Distribution Frames (MDFs) and Intermediate Distribution Frames (IDFs), ensuring adherence to structured cabling standards, cable management, power distribution, cooling and physical security.
• Design, deploy and manage the Juniper Mist AI-driven platform, including Mist Access Points, Mist Edge and the Mist Cloud dashboard, Marvis Virtual Network Assistant, Wi-Fi Assurance, Wired Assurance and WAN Assurance.
• Deploy, manage and optimize Palo Alto Networks SD-WAN and firewalls, including policy creation, threat prevention, VPN configuration and performance tuning.
• Design and implement AWS Transit Gateway architectures for large-scale network connectivity, including VPC attachments, Direct Connect Gateway, route propagation, network segmentation and policy enforcement.
• Set up and manage AWS Gateway Load Balancer (GWLB) for deploying and scaling third-party virtual appliances.
• Establish and manage VPC Peering connections (intra-region and inter-region).
• Implement AWS traffic management using Route 53, Elastic Load Balancing (ALB/NLB) and AWS Direct Connect for hybrid connectivity.
• Configure and manage Security Groups, Network ACLs and other AWS native security features.
• Implement, configure and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), including identity provider integrations (e.g., SAML, SCIM), identity-based security policies and access groups.
• Deploy, manage and troubleshoot Zscaler Private Service Edges (PSEs) for access to internal applications via ZPA.
• Develop and contribute to Business Continuity Plans (BCP) for Zscaler services.
• Configure traffic forwarding, security policies and application segments in Zscaler.
• Lead network infrastructure projects from conception to completion, including requirements gathering, design, planning, execution and post-implementation support.
• Monitor network performance and integrity using tools such as Marvis, identify and resolve complex network issues, and implement proactive measures to prevent outages and performance degradation.
• Develop and maintain network documentation, including diagrams, configurations, IDF/MDF layouts, Zscaler policy and architecture details and operational procedures, and present technical information clearly to diverse audiences.
• Collaborate and communicate with cross-functional teams (Security, Systems, Applications, DevOps, Facilities) to ensure network infrastructure supports business requirements.
• Perform network capacity planning and recommend upgrades and enhancements to meet evolving business needs.
• Participate in an on-call rotation for after-hours support and respond to critical network incidents, providing 24x7 operational support as needed.
• Mentor junior network engineers and provide technical guidance and support.

What you'll need

• 8+ years' total experience.
• Extensive experience with enterprise-grade routing and switching, including Cisco IOS/IOS-XE/NX-OS.

Nice to have

• Relevant industry certifications such as CCNP (Enterprise/Data Center/Security), CCIE (Enterprise Infrastructure/Security), JNCIP-ENT, JNCIS-MistAI or JNCIP-MistAI, PCNSE, AWS Certified Advanced Networking – Specialty, or Zscaler Certified Cloud Professional or Administrator (ZCCP-PA, ZCCP-IA, ZCCA-PA, ZCCA-IA).
• Experience with scripting and automation (e.g., Python, Ansible) for network tasks, including AWS CloudFormation or Terraform for infrastructure as code.
• Knowledge of SD-WAN technologies.
• Familiarity with other cloud platforms (Azure, GCP).
• Experience with network segmentation and micro-segmentation strategies.

Details

• Location: Pune, India.
• Flex Work: at least 50% of time each quarter in the office or in the field with customers, prospects and partners, depending on role.
• On-call rotation for 24x7 support.