VPN Engineer

Role: VPN Engineer

Location: Gurgaon

Graviton is a privately funded quantitative trading firm striving for excellence in financial markets' research. We are seeking a Network Engineer for our team in Gurgaon. Graviton trades across a multitude of asset classes and trading venues using a gamut of concepts and techniques ranging from time series analysis, filtering, classification, stochastic models, pattern recognition to statistical inference analysing terabytes of data to come up with ideas to identify pricing anomalies in financial markets.

• Manage and support corporate network infrastructure across multiple locations, including routers, firewalls, switches, wireless access points, VPN gateways, Internet links, and LAN/WAN connectivity.

• Configure and troubleshoot VPN technologies such as IPsec, SSL VPN, site-to-site VPN, remote-access VPN, WireGuard, OpenVPN, and FortiClient/FortiGate VPN, including issues related to authentication, tunnels, routing, DNS, packet loss, performance, split tunnelling, and firewall policies.

• Manage secure connectivity between offices, data centres, cloud environments, and remote users.

• Configure and maintain office LAN infrastructure, including VLANs, trunk/access ports, inter-VLAN routing, DHCP, DNS, NAT, ACLs, static routing, BGP, and OSPF where required.

• Manage multiple ISP connections, including primary and backup Internet links, automatic failover, and monitoring of utilization, latency, jitter, packet loss, and link availability.

• Coordinate with ISPs and telecom providers for new circuits, link failures, bandwidth upgrades, routing issues, packet-loss investigations, and service escalations.

• Manage firewall policies, NAT rules, VPN policies, network objects, and routing, while regularly reviewing and removing unnecessary access.

• Implement network segmentation across user, server, management, guest, and other business networks, while maintaining secure administrative access to network equipment.

• Support MFA and secure authentication for remote VPN users and investigate suspicious network activity and connectivity issues.

• Work with security teams on vulnerability remediation, firewall reviews, and network audits.

• Manage wired and wireless office connectivity, including VLANs, access points, SSIDs, authentication, and guest Wi-Fi.

• Support network connectivity for new office expansions and relocations, including coordination of cabling, patch panels, switch ports, ISP connections, and network equipment installations.

• Maintain accurate documentation for network diagrams, IP addresses, VLANs, VPN tunnels, firewall rules, ISP circuits, device inventory, switch-port mappings, and Wi-Fi infrastructure.

• Maintain SOPs for common networking tasks and incident recovery, and follow established change-management processes for production changes.

• Prepare implementation and rollback plans for major network changes and maintain configuration backups for routers, switches, firewalls, and VPN gateways.

• Basic experience with network automation is preferred, including Python, Bash/Shell scripting, Ansible, REST APIs, and other network automation tools.

• Automate repetitive tasks such as network checks, configuration backups, VPN monitoring, IP validation, and device health checks where possible.

The ideal candidate will have 3+ years of experience with:

• Strong understanding of TCP/IP, routing and switching, VLANs, NAT, DHCP, DNS, and Internet routing.

• Hands-on knowledge of VPN technologies, including