dreamwork_
Home · Neev · Cisco Ise L2 – Senior Network Engineer

Job Description – Sr. Network Engineer (L2)

Role: L2 – Senior Network Engineer
Experience Required: 4–8 Years
Employment Type: Permanent
Job Location: Gurugram
Working Days: 5 Days a Week

Job Overview

We are looking for an experienced L2 Senior Network Engineer with strong expertise in network operations, monitoring, troubleshooting, and infrastructure support. The role involves managing day-to-day network operations, monitoring network health, resolving L2 issues, and executing configuration changes under defined SOPs and guidance from L3 teams.

Key Responsibilities

1. Cisco DNAC Support

  • Monitor network health, device compliance, and assurance dashboards.

  • Assist in provisioning switches and access points using DNAC templates.

  • Generate and analyze DNAC reports, including inventory, SWIM, topology, and client health.

  • Perform basic troubleshooting of synchronization failures and telemetry issues.

2. Cisco ISE (NAC / EAP-TLS / MDM / RADIUS / TACACS+)

  • Monitor authentication logs and troubleshoot 802.1X authentication failures (EAP-TLS, PEAP).

  • Verify endpoint posture assessments and MDM compliance status.

  • Troubleshoot user and machine certificate-related issues.

  • Perform ISE node and PSN health checks.

  • Handle basic ISE operations, including endpoint addition, profiling checks, and session clearing.

  • Escalate complex authentication and policy-related issues to L3 teams.

3. Cisco ThousandEyes

  • Monitor agent health, alerts, and network performance.

  • Validate synthetic tests and endpoint agent functionality.

  • Troubleshoot basic connectivity and agent installation issues.

4. Fortinet – FortiGate, FortiAnalyzer & FortiManager

  • Monitor firewall logs and security alerts through FortiAnalyzer.

  • Assist with firewall rule reviews and rule lifecycle management.

  • Execute standard configuration updates through FortiManager under guidance.

  • Perform basic troubleshooting of VPN connectivity, interface flaps, and routing issues.

5. IT Asset Management

  • Maintain and update network inventory, including switches, access points, routers, and firewalls.

  • Track firmware versions, EOL/EOS status, and compliance requirements.

  • Assist with spare inventory management and RMA coordination.

6. LAN Switching – Cisco / Brocade / Nexus

  • Troubleshoot access-layer network issues involving VLANs, trunking, and STP.

  • Perform switch port configuration, MAC address tracing, and interface health checks.

  • Handle basic Cisco Nexus operations, including vPC checks and interface monitoring.

  • Perform configuration backups and restoration activities.

7. Scripting & Automation Support

  • Execute pre-built scripts using Python, Bash, and Ansible for routine automation tasks.

  • Assist in log collection, report generation, and operational activities using automation tools.

8. DHCP Support

  • Troubleshoot IP address conflicts and DHCP scope exhaustion.

  • Validate DHCP leases and address assignment logs.

  • Check DHCP relay configurations (IP Helper) and related connectivity issues.

9. NIPS (Network Intrusion Prevention System)

  • Monitor intrusion alerts and security events.

  • Perform initial analysis of suspicious network activity and escalate findings to relevant teams.

  • Validate sensor health and connectivity.

10. Cisco Wireless LAN Controller (WLC)

  • Troubleshoot wireless client connectivity issues, including authentication failures, DHCP, and roaming.

  • Monitor wireless controller and access point health.

  • Modify WLAN configurations as per defined SOPs.

  • Troubleshoot RF parameters, AP join issues, and client load-related problems.

Required Skills & Qualifications

  • Strong understanding of L2/L3 networking fundamentals, including VLANs, STP, EtherChannel, DHCP, and basic routing.

  • Hands-on experience in network monitoring, operations, and L2 troubleshooting.

  • Familiarity with Cisco DNAC, Cisco ISE, Cisco ThousandEyes, and Cisco WLC.

  • Working knowledge of Fortinet solutions – FortiGate, FortiAnalyzer, and FortiManager.

  • Understanding of 802.1X authentication mechanisms, including EAP-TLS and PEAP.

  • Familiarity with troubleshooting tools such as Wireshark, DNAC Assurance, ThousandEyes, and FortiAnalyzer.

  • Basic scripting knowledge in Python, Bash, or Ansible.

  • Good documentation, incident management, and change management skills.

Experience Requirements

  • 4–8 years of relevant experience in Network Operations, Network Support, or Infrastructure Support.

  • Experience in monitoring, troubleshooting, and executing network changes in an enterprise environment.

  • Ability to handle L2 operational issues independently and coordinate with L3 teams for complex escalations.