Role Summary

Senior Network Engineer responsible for designing, implementing, and supporting enterprise Layer-2 switching and wireless networks using Cisco and Aruba technologies, integrating Network Access Control (ClearPass & Cisco ISE) and firewalls to ensure secure, scalable, and highly available network infrastructure.

Key Responsibilities

• Design and manage enterprise L2 switching infrastructure using Cisco Catalyst and Aruba CX switches
• Configure and optimize VLANs, trunking, STP (RSTP/MSTP), LACP, Port Security, BPDU Guard
• Lead deployment and support of Aruba and Cisco wireless networks in Layer-2 architecture
• Design and manage SSID-to-VLAN mapping, RF optimization, roaming, and capacity planning
• Implement 802.1X authentication for wired and wireless users using Aruba ClearPass and Cisco ISE
• Design and enforce role-based access control, dynamic VLAN assignment, and guest/BYOD access
• Integrate ClearPass & ISE with Active Directory, switches, WLCs, and firewalls
• Work closely with firewalls (FortiGate / SonicWall) for network segmentation, NAT, and policy enforcement
• Ensure high availability, redundancy, and loop-free topology across campus networks
• Perform advanced L2, wireless, NAC, and firewall troubleshooting
• Mentor junior engineers and support operational excellence
• Participate in network design reviews, audits, and documentation

Technical Skills

• Switching (L2): Cisco Catalyst, Aruba CX
• Wireless: Aruba APs, Cisco APs (L2 deployment)
• Protocols: VLAN, 802.1Q, STP, RSTP, MSTP, LACP
• NAC: Aruba ClearPass, Cisco ISE, 802.1X
• Security: FortiGate, SonicWall Firewalls
• Authentication: Active Directory / LDAP
• Enterprise Network Design & Troubleshooting

Experience & Qualifications

• 5–8+ years of experience in enterprise network environments
• Strong hands-on expertise with Cisco & Aruba switching and wireless
• Proven experience implementing ClearPass and Cisco ISE
• Experience supporting large user environments (1000+ users)
• Exposure to banking, enterprise, or large campus networks preferred

Mandatory / Preferred Certifications

• Cisco Certified Network Professional (CCNP – Enterprise) or equivalent hands-on experience
• Aruba Certified Professional (ACP – Switching / Wireless) or ACMP / ACSP
• Aruba ClearPass Certification (ACCP / ACCX – ClearPass) or strong implementation experience
• Cisco ISE Certification (ISE Fundamentals / Security track preferred)