Note: The job is a remote job and is open to candidates in USA. Tata Consultancy Services is seeking a Network Software Engineer to design and maintain enterprise network architectures and ensure compliance with cybersecurity standards. The role involves managing network performance, cloud configurations, and systems infrastructure while integrating security measures and supporting incident response activities.
Responsibilities
- Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking)
- Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN)
- Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles
- Implement network telemetry, logging, and packet-capture visibility solutions
- Ensure network resiliency, redundancy, and capacity planning across environments
- Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs)
- Perform network performance troubleshooting, service restoration, and RCA documentation
- Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX-OS upgrades
- Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V)
- Configure and optimize system performance, storage, virtualization, and backups
- Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents)
- Deploy and manage containers, Kubernetes, orchestration systems
- Implement secure system baselines (CIS, NIST 800-53, DISA STIGs)
- Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management
- Support patching, OS hardening, system logging, FIM, vulnerability remediation
- Conduct performance and health monitoring of critical compute resources and services
- Integrate network/sys logs into SIEM platforms following CIM or standardized schema
- Implement network and system controls supporting ISO27001, or NIST RMF compliance
- Support incident response through data collection, log analysis, containment actions, and implementing compensating controls
- Manage access controls, least-privilege enforcement, and identity integrations for infrastructure
- Support audit evidence collection and configuration/state reporting
Skills
- Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN)
- Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet
- Expertise in firewalls, VPNs, network segmentation, IDS/IPS
- Cloud networking (AWS VPCs, PrivateLink, TGW; Azure VNets; GCP VPCs)
- Familiarity with SD-WAN, load balancing, and NAC solutions
- Linux and Windows administration expertise
- Virtualization platforms (VMware ESXi/vCenter, Hyper-V)
- Cloud systems management (AWS EC2/EBS/EFS/RDS; Azure IaaS; GCP Compute)
- Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO
- Containerization (Docker, Kubernetes, EKS/AKS/GKE)
- Knowledge of NIST 800-53, RMF, CIS benchmarks, DISA STIG hardening
- Experience integrating logs into SIEM platforms (Splunk, QRadar, Elastic)
- Familiarity with IAM, MFA, Zero Trust, segmentation models
- Ability to support SOC incident response activities
- Scripting skills: Python, Bash, PowerShell
- Automation: Ansible, Terraform, CloudFormation, GitLab CI/CD
- Knowledge of monitoring frameworks (Prometheus, Grafana, CloudWatch)
- Proficiency in leveraging Artificial Intelligence (AI) to drive innovation and efficiency within technical domains
- Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking)
- Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN)
- Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles
- Implement network telemetry, logging, and packet-capture visibility solutions
- Ensure network resiliency, redundancy, and capacity planning across environments
- Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs)
- Perform network performance troubleshooting, service restoration, and RCA documentation
- Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX-OS upgrades
- Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper-V)
- Configure and optimize system performance, storage, virtualization, and backups
- Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents)
- Deploy and manage containers, Kubernetes, orchestration systems
- Implement secure system baselines (CIS, NIST 800-53, DISA STIGs)
- Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management
- Support patching, OS hardening, system logging, FIM, vulnerability remediation
- Conduct performance and health monitoring of critical compute resources and services
- Integrate network/sys logs into SIEM platforms following CIM or standardized schema
- Implement network and system controls supporting ISO27001, or NIST RMF compliance
- Support incident response through data collection, log analysis, containment actions, and implementing compensating controls
- Manage access controls, least-privilege enforcement, and identity integrations for infrastructure
- Support audit evidence collection and configuration/state reporting
Company Overview
Company H1B Sponsorship