Lead Engineer- Network Modernization
- Location
- Coimbatore, India
- Employment
- Full Time
- Work model
- On-Site
- Level
- Senior
- Posted
Skills
About this role
The Opportunity
Avantor is looking for the Lead Engineer- Network Modernization, reporting to the Manager, Data Network Services at Avantor, is responsible for building, implementing, and supporting enterprise network, infrastructure across LAN, WAN, and cloud environments. This role emphasizes translating architectural designs into deployable solutions, validating configurations, and ensuring reliable, secure, and scalable network operations.
Key Responsibilities
Network Design & Build Engineering: Translate high-level architecture into detailed, deployable network designs (low-level designs) Build, plan, and validate new network configurations and capabilities across LAN, WAN, Wi-Fi, SD-WAN, and cloud environments Develop and maintain network diagrams, standards, and reusable design templates Contribute to capacity planning and scalability assessments Implementation & Deployment: Lead implementation of network solutions aligned with enterprise architecture and corporate standards Lab-test and pilot new network services, hardware, and policies prior to production rollout Execute network upgrades, migrations, and deployments with minimal business disruption Coordinate closely with architecture and modernization teams to ensure smooth handoffs Operations & Support: Troubleshoot complex network performance and connectivity issues across on-prem and remote environments Support and optimize remote access solutions including VPN and secure access technologies Manage build requests, implementation backlogs, and configuration changes Security & Compliance: Implement network security controls including firewalls, segmentation, and secure connectivity solutions Ensure compliance with enterprise security policies and industry standards Support vulnerability remediation, audits, and risk mitigation efforts Collaboration & Documentation: Partner with cloud, infrastructure, and security teams to deliver integrated solutions Participate in technical design discussions and reviews Maintain accurate documentation of configurations, procedures, and standards Success Metrics: Timely completion of network implementation plans Successful lab validation and pilot deployments Reduction in network-related incidents through proactive improvements Number of reusable design templates and standardized configurations developed Required Qualifications: Bachelor’s degree in Computer Science, Information Technology, or related field 10+ years of experience in network engineering or infrastructure roles. Technical Expertise: Strong understanding of core networking protocols: TCP/IP, DNS, DHCP Routing & switching: hands-on experience with OSPF, BGP, and enterprise routing/switching across Cisco and HPE platforms WAN technologies: experience with Cisco SD-WAN and traditional WAN architectures Wireless networking: experience with Aruba Wireless and enterprise Wi-Fi deployments, Wireless Surveys, troubleshooting complex wireless related issues. Network security: strong knowledge of enterprise security principles including firewalls, segmentation, and access control Hands-on experience with security platforms and services such as Palo Alto firewalls, Zscaler (ZIA/ZPA), and secure access solutions Cloud networking: hands-on experience designing and implementing AWS VPC and Azure VNet architectures, including subnets, route tables, security groups, peering, NAT gateways, and hybrid connectivity (VPN, Direct Connect, ExpressRoute) Experience with secure remote access and zero trust architectures (e.g., ZPA) Strong troubleshooting, analytical, and problem-solving skills across complex, distributed network environment Preferred Qualifications: Relevant certifications such as CCNP, CCIE, or equivalent (Routing & Switching, Enterprise, or Security) Experience with Cisco SD-WAN design, deployment, and operations in enterprise environments Exposure to Zero Trust Network Access (ZTNA) frameworks and secure access solutions (e.g., Zscaler ZIA/ZPA)