Network Engineer

NOTICE: This role is exclusively for candidates residing in Mumbai, India. Applications from outside Mumbai will not be considered.

peopleHum is seeking an experienced Network Engineer specializing in SaaS/Cloud Networking to join our team in Mumbai. With 12 years of dedicated experience, you will play a crucial role in ensuring our platform's reachability, speed, and security. In a SaaS environment, networking extends beyond traditional infrastructure; it encompasses robust cloud networking, efficient traffic routing, reliable DNS management, and stringent security controls, all vital for a seamless customer experience.

You will collaborate closely with our DevOps/SRE and Security teams to manage daily network operations, resolve connectivity issues, and maintain highly reliable cloud network configurations. Additionally, you will provide support for our on-ground network infrastructure, with a particular focus on Fortigate firewall setups and Ruckus Wireless environments.

Key Responsibilities

• Oversee day-to-day network operations across both production and non-production environments.
• Manage and support cloud networking components including VPC/VNet, subnets, route tables, NAT/Internet gateways, and security groups/NACLs.
• Maintain critical traffic layers such as DNS, load balancers, SSL/TLS, and provide support for CDN/WAF where applicable.
• Troubleshoot complex network issues including timeouts, latency spikes, DNS misrouting, SSL handshake errors, and VPN/IP allowlisting problems.
• Implement and manage secure access solutions, including IP whitelisting, VPN connectivity, and basic access control checks.
• Configure and administer Fortigate firewalls, managing policies, NAT rules, VPN basics, logs, and access controls.
• Support office and hybrid network environments utilizing Ruckus Wireless, including AP health checks, connectivity troubleshooting, and basic configuration support.
• Develop and maintain comprehensive network documentation, including diagrams, SOPs, runbooks, and change logs.
• Assist in setting up and managing monitoring and alerting systems for network health and uptime.
• Participate in incident response, including triage, issue isolation, contributing to root cause analysis, and implementing follow-up fixes.
• Collaborate with DevOps/SRE teams to ensure safe and production-ready network changes, minimizing deployment risks.

Required Skills & Qualifications

• 12 years of experience in Network Engineering, NOC, Cloud Operations, or IT Infrastructure support.
• Solid understanding of networking fundamentals: TCP/IP, DNS, HTTP/HTTPS, routing principles, and SSL/TLS concepts.
• Proficiency in Linux basics, including network commands, log analysis, and troubleshooting.
• Experience with at least one major cloud platform (AWS, Azure, or GCP) and its associated networking concepts.
• Knowledge of fundamental security principles: firewalls, access rules, security groups, and a strong adherence to the least privilege principle.
• Familiarity with firewall operations, including policy rules, NAT, VPN concepts, and log analysis; Fortigate experience is a significant advantage.
• Ability to produce clear and detailed issue reports, including reproduction steps, evidence, and impact assessment.

Qualifications

Must-Have Skills

• Hands-on experience with Fortigate (FortiGate) firewalls, including policy configuration, NAT, VPN setup, and log-based troubleshooting.
• Experience troubleshooting Ruckus Wireless systems, including APs, controllers, and connectivity issues.
• Familiarity with AWS Route 53, ELB, CloudFront, or equivalent services in Azure/GCP.
• Exposure to WAF/DDoS concepts and relevant tools (e.g., Cloudflare, AWS WAF).
• Basic knowledge of Infrastructure-as-Code principles and tools (e.g., Terraform, CloudFormation).
• Experience with monitoring tools such as CloudWatch, Grafana, Datadog, ELK stack, or Prometheus.
• Basic scripting skills in Bash or Python for automating operational tasks.
• A strong curiosity for understanding and preventing issues in large-scale SaaS systems.