Senior Network Engineer

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic and labelling is accurate.

The Eurofins network of companies believes that it is a global leader in food, environment, pharmaceutical and cosmetic product testing and in discovery pharmacology, forensics, advanced material sciences and AgroScience contract research services. It is also one of the market leaders in certain testing and laboratory services for genomics, and in the support of clinical studies, as well as in biopharma contract development and manufacturing. It also has a rapidly developing presence in highly specialised and molecular clinical diagnostic testing and in-vitro diagnostic products.

In over 37 years, Eurofins has grown from one laboratory in Nantes, France to over 65,000 staff across a decentralised and entrepreneurial network of more than 950 laboratories in over 1,000 companies across 59 countries. Eurofins companies offer a portfolio of over 200,000 analytical methods to evaluate the safety, identity, composition, authenticity, origin, traceability and purity of biological substances and products.

In 2024, Eurofins generated total revenues of EUR 6.95 billion; and has been among the best performing stocks in Europe over the past 20 years.

TITLE: Senior Network Engineer

REPORTING To: CoE Network Manager

WORKING LOCATION: Bengaluru

SUMMARY OF ROLE AND OBJECTIVES:

The Infrastructure Lead - IT is an intermediate-senior technical contributor within the CoE Network team responsible for end-to-end project delivery, execution of complex network initiatives, and operational excellence across Eurofins network landscape. This role carries a strong emphasis on project delivery, on-time execution, and stakeholder management, while contributing hands-on technical expertise across multi-vendor network and security platforms.

The engineer will work closely with Level 3 engineers, architects, and regional teams/IT zones to deliver network projects, drive change, and support operational escalations in line with ITIL methodology and Eurofins Policies & Procedures (ENNA - Eurofins Normalised Network Architecture).

Project Delivery (Primary Focus)

A senior technical resource within the team who can manage complex networks including datacentres.

Own and deliver assigned network infrastructure projects end-to-end - from initiation, planning, design validation, execution, testing, cutover, to hyper care and handover.

Drive on-time, on-scope, and on-quality delivery of global and regional projects including new site build-outs, datacentre migrations, firewall refresh/migration programs, SD-WAN rollouts, VoIP integrations, WAF deployments, and Zero Trust initiatives.

Create and maintain project artefacts: Low-Level Designs (LLDs), High-Level Designs (HLDs), Bill of Materials (BoM), implementation plans, rollback plans, test plans, and Run/Operate documentation.

Coordinate with cross-functional teams (Security, Cloud, Service Desk, Regional IT, Vendors, ISPs) to remove blockers and ensure milestone adherence.

Provide regular project status updates, RAID logs (Risks, Assumptions, Issues, Dependencies), and escalations to the CoE Network Manager and IT Infrastructure leadership.

Contribute to capacity planning, lifecycle management, and technology refresh roadmaps.

Operations, Incident & Change Management

Manage the CoE Network ITSM queue - triage, troubleshoot, and resolve Network Incidents (with focus on P1/P2/P3).

Fulfil Network Service Requests including new device installation, configuration changes, and documentation updates.

Own and manage Network Changes following Eurofins Change Management Process (RFC creation, CAB presentation, implementation, and post-implementation review).

Participate in Problem Management and SWOT analysis to drive proactive service improvements.

Support technical escalations and elevated support to maintain SLAs.

Standards, Documentation & Governance

Contribute to the creation and review of Key Group Documents, SOPs, Work Instructions, and Guidelines aligned with ENNA standards.

Deliver services following ITIL methodology - IT Service Cards, SOPs/WIs, Training, and Service Transition.

Required Technical Skills

Network Security (Strong Emphasis - Multi-Vendor)

Check Point Firewalls & MDSM (Multi-Domain Security Management) - policy management, VSX, clustering, upgrades, migrations.

Fortinet FortiGate - FortiManager, FortiAnalyzer, SD-WAN features, SSL VPN, IPSec.

Palo Alto Networks - Panorama, NGFW features, App-ID, User-ID, GlobalProtect, Prisma.

Cisco Secure Firewall (Firepower/FTD/ASA) - FMC, threat policies, migrations from ASA to FTD.

Web Application Firewalls (WAF) - hands-on with Cloudflare, AWS WAF, Azure WAF, F5 ASM/Advanced WAF, or Imperva.

Cloudflare - DNS, CDN, WAF, Zero Trust / Cloudflare Access, DDoS protection, Magic Transit (desirable).

Experience with DDoS mitigation, IPS/IDS, TLS inspection, and modern Zero Trust / SASE architectures.

Routing & Switching

Cisco - Catalyst (29xx/3xxx/9xxx), Nexus (5K/7K/9K), ASR, ACI (desirable), IOS/IOS-XE/NX-OS.

Juniper switching - EX/QFX series, Junos OS, virtual chassis, EVPN-VXLAN (desirable).

HPE/Aruba and Dell switching platforms.

Deep knowledge of Layer 2/3 protocols - VLAN, STP/RSTP/MSTP, LACP, OSPF, EIGRP, BGP, MPLS, VRF, multicast.

Routing convergence optimisation and traffic engineering.

WAN, SD-WAN & Connectivity

SD-WAN - Arista VeloCloud (primary), with awareness of Cisco Viptela / Versa / Fortinet SD-WAN.

MPLS, Internet breakout design, hybrid WAN, DIA circuits.

VPN technologies - IPSec (policy & route-based), SSL VPN, Remote Access VPN, DMVPN.

Wireless

Cisco Wireless (WLC, LAP/CAPWAP, Autonomous APs), Cisco Meraki, Aruba, Aerohive/HiveManager.

Load Balancing & Application Delivery

A10 (preferred), F5, KEMP - VIPs, SSL offload, persistence, health monitors, iRules/aFleX basics.

Voice & Collaboration

Cisco Call Manager, Cisco Unity, UCS, and cloud-based telephony (RingCentral, MS Teams Voice awareness).

Authentication & Access

RADIUS, TACACS+, Cisco ISE/ACS, 802.1X, NAC fundamentals.

Cloud & Modern Networking

Networking in AWS / GCP / Azure (VPC/VNet, Transit Gateway, VNet Peering, ExpressRoute, Direct Connect).

Infrastructure-as-Code familiarity (Terraform, Ansible) for network automation.

Monitoring & observability tools - SolarWinds, PRTG, ThousandEyes, Splunk.

QoS, Traffic Engineering & Tools

QoS, queuing, traffic shaping, policy management.

Packet capture & analysis (Wireshark, tcpdump).

Personal Qualities / Profile

Project-focused - able to drive tasks to completion under tight deadlines.

Autonomous, proactive, analytical, and rigorous.

Business-focused with strong risk sensitivity.

Excellent coordination skills - able to work across individuals, teams, vendors, and geographies.

Strong written and verbal communication.

Comfortable operating in a tightly controlled change-managed environment.

Qualifications and Experience

University Degree in Information Technology, Computer Science, Electronics, or comparable field - or equivalent relevant work experience.

Minimum 6-8 years of hands-on experience in enterprise networking and security with at least 2-3 years in a project delivery or lead capacity.

Industry certifications preferred: CCNP (Enterprise/Security), CCSA/CCSE (Check Point), NSE 4/5/6 (Fortinet), PCNSA/PCNSE (Palo Alto), ITIL v4 Foundation; PMP/Prince2 Foundation a plus.

Strong communication skills in English (verbal and written) - able to present to technical and business stakeholders.

Proven experience working in geographically diverse, multi-vendor enterprise environments.