Run maintenance windows, with written MOPs that are approved, pre-checks and config snapshots, rollback plans, post-change verification. Manage software lifecycle and hardware spares. Keep config backup and compliance scanning honest via RANCID/Oxidized or equivalent. Test procedures line by line in lab or simulator, test by failing the link, watching BGP reconverge, confirm the route policy worked correctly.
Security & Compliance: Treat network security as a daily discipline, not a quarterly project. The fundamentals at the edge: infrastructure ACLs, uRPF in the right mode for each interface, max-prefix limits and prefix-list / AS-path filtering on customer and peer sessions. Manage segmentation, - VRFs, VLANs, and security zones that mean are following the standards. Keep AAA tight (TACACS+/RADIUS, command authorization, accounting logs that are reviewed). Audit ACL sprawl periodically and retire stale or shadowed rules. Track PSIRT advisories against the deployed fleet and prioritize upgrades by actual exposure. Maintain DDoS posture (RTBH, scrubbing-service integration as applicable). Keep the environment audit-ready year-round for PCI-DSS / SOC-2.
Who we have in mind
Technical Expertise with 7+years experience, this role is built for engineers who understand networks at the protocol and platform level, not just at the abstraction layer. We're a Cisco shop across routing, switching, and firewalls - IOS-XE, NX-OS, and IOS-XR experience expected, not optional. Strong fundamentals first; tooling on top.
Solid working knowledge of TCP/IP, the OSI model, and modern routing/switching - BGP, OSPF, MPLS, VXLAN/EVPN, STP families, wireless, and WAN optimization, including the common failure modes of each.
Hands-on with firewalls, IPsec and SSL/remote-access VPNs, network security fundamentals, and load balancing on F5 BIG-IP LTM and GTM/DNS — design, troubleshooting, cert renewals, profile/pool hygiene, monitor tuning.
Scripting and automation built on top of fundamentals. CLI fluency and bash / awk / sed / regex are the daily routine - for log mining, show-output parsing, ad-hoc triage. Python for the heavier lifting (APIs, multi-device orchestration, structured parsing). Every script should reflect that you understand the device level - automation accelerates good engineers, it doesn't substitute for them.
Documentation in Confluence with Visio (or equivalent) - updated when the network changes.
Familiar with cloud networking (AWS VPC, Transit Gateway, Direct Connect; Azure VNet, ExpressRoute), SD-WAN, and modern data center fabrics (Nexus VXLAN/EVPN, ACI).
Strong English verbal and written skills.
Working Conditions
Hybrid, combination of Bangalore office.
24x7 on-call rotation for critical incidents.
It would be great if you had
Vendor certifications, e.g., CCNP and F5, etc.
An advanced degree in Computer Science or a related field.
Hands-on experience with major cloud providers, e.g. AWS, OCI and GCP, etc.
What we offer
Synchronoss is proud to be an equal opportunity employer. As a global company, we value and celebrate diversity and are committed to a workplace free from discrimination and harassment. We take pride in fostering an inclusive environment based on mutual respect and merit. We are at our best when our workforce is dynamic in thought, experience, skill set, race, age, gender, sexual orientation, sexual expression, national origin and beyond.
