{"id":2446236,"url":"https://alion.io/job/sanofi-network-engineer-deployment-and-support","title":"Network Engineer – Deployment and Support","company":{"id":146,"name":"Sanofi","domain":"sanofi.com","url":"https://alion.io/company/sanofi","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":103,"ghost_share":0,"stale_share":0.301,"repost_share":0.029,"time_to_fill_p50_days":14,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Networking","role_family":"Networking","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"AIOps","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"Git","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"MPLS","optional":false},{"name":"OSPF","optional":false},{"name":"Python","optional":false},{"name":"Red Hat","optional":false},{"name":"Scrum","optional":false},{"name":"Selenium","optional":false},{"name":"Self-Healing","optional":false},{"name":"ServiceNow","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-10-13T13:34:56Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T09:38:15Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About the Job\nAs 'Network Engineer - Deployment and Support' within our Digital Technology Service Quality team, you will deploy, and support the enterprise network that connects Sanofi - LAN and WAN, WLAN, data center fabric, SD-WAN, and cloud networking across AWS and Azure. You will deploy infrastructure as code using Terraform, Ansible, and Python wherever the platform allows, and apply the same engineering rigor where it does not. You will own what you deploy - from design validation and automated pre-change checks through to day-two operations, capacity management, and incident response - ensuring our network estate remains accurate, performant, resilient, and ready for AI-enabled operations. Ready to get started?\nOur Team\nDigital Technology - Service Quality is at the heart of Sanofi's digital transformation. We deliver secure, resilient, and scalable infrastructure services that power business-critical applications and enable thousands of users across the enterprise. Our network engineering team owns the connectivity that every other service depends on - spanning offices, laboratories, manufacturing sites, data centers, and multiple cloud providers. Our team combines modern cloud platforms, automation-first engineering, and service excellence to support Sanofi's mission of chasing the miracles of science.\nAbout Sanofi\nWe're an R&D-driven, AI-powered biopharma company committed to improving people's lives and delivering compelling growth. Our deep understanding of the immune system - and innovative pipeline - enables us to invent medicines and vaccines that treat and protect millions of people around the world. Together, we chase the miracles of science to improve people's lives.\nMain Responsibilities\nNetwork Deployment - Infrastructure as Code and Automation\nDeploy cloud network infrastructure as code using Terraform, provisioning virtual networks and VPCs, subnets, route tables, peering, transit gateway and virtual WAN hubs, VPN gateways, and ExpressRoute and Direct Connect attachments across AWS and Azure, with reusable modules, remote state management, and plan review built into the change process\nDeploy and maintain network configuration as code using Ansible, building reusable roles and templates for Cisco IOS and NX-OS, FortiOS, and Junos devices so that every deployment is repeatable, version-controlled, and auditable\nAutomate network provisioning and operational tasks in Python, consuming platform APIs - Cisco APIC for ACI fabric, Junos Space for Juniper estate management, Prisma SD-WAN and FatPipe controllers, and F5, Array, and AVI load balancer APIs\nAutomate vendor web consoles and portals that expose no usable API using Selenium, so that carrier portals, licensing, and legacy management interfaces do not force manual work\nUse NEXUS as an AI agent within the engineering workflow to accelerate configuration generation and peer review, triage large log and packet-capture data sets, draft runbooks and knowledge articles, and scaffold Ansible and Python automation\nMaintain Git as the source of truth for network configuration, with golden configuration templates, peer-reviewed changes, and a full version-controlled audit trail\nOperate deployment pipelines for network change, including automated pre-change validation, standards compliance checks, and automated post-deployment verification of routing state, reachability, and interface health\nImplement configuration drift detection and automated remediation, so deployed network configuration provably matches its declared intent\nCodify network standards - naming, addressing, VLAN and VRF conventions, hardening baselines, and device software targets - and gate deployments against them\nDrive deployments from an authoritative source of truth for IP addressing and inventory, rather than from spreadsheets\nImplement zero-touch and templated onboarding so new switches, access points, and site routers reach a compliant baseline without manual console configuration\nNetwork Deployment - Engineering Delivery\nDeploy network configuration items (CIs) including Cisco IOS and NX-OS switches and routers, Juniper devices, Aruba wireless controllers and access points, load balancers, and network appliances, from initial requirement through to validated production handover\nDeliver network deployments at offices, laboratories, manufacturing sites, and on-premises data centres, including physical installation, rack and stack, structured cabling, optics, power and environmental checks, and high-availability pairing\nDeliver hardware refresh, end-of-life replacement, and firmware and network OS upgrade campaigns across Cisco IOS/NX-OS, FortiOS, and Junos platforms, including RMA handling across the device estate\nExecute controlled environment promotion (Dev to Pre-Prod to Production) with documented rollback and recovery plans for every deployment\nRegister all deployed CIs in the CMDB with correct class, attributes, relationships, ownership, location, and lifecycle status at point of deployment\nConfigure and maintain network discovery and SNMP so network CIs are correctly classified with accurate serial numbers, models, and discovery-source behavior\nOnboard every newly deployed CI into monitoring, telemetry, configuration backup, and patching tooling before production sign-off\nProduce and maintain as-built documentation, network topology diagrams, low-level designs, runbooks, and knowledge articles for all deployed infrastructure\nRouting, Switching and Networking Protocols\nImplement and support routing across the estate - BGP and OSPF to a strong standard, static routing, route redistribution, filtering, and path selection\nDesign and implement VRF-based segregation and route separation across data center, campus, and WAN environments\nImplement and support switching - VLANs, trunking, spanning tree, link aggregation, vPC, and first-hop redundancy on Cisco IOS and NX-OS platforms\nImplement and support IPSec tunnelling for site-to-site and cloud connectivity, including encryption standards, rekeying, and failover behavior\nDesign and implement addressing and subnetting to enterprise standards, maintaining IP address management accuracy as deployments land\nImplement quality of service, multicast, and traffic engineering where application or manufacturing requirements demand it\nImplement network zones, VLANs, and segmentation in line with security architecture and zoning standards, in partnership with the network security team\nData Centre, SDN and SD-WAN\nDeploy and support data center fabrics built on Cisco ACI, using Cisco APIC for policy, tenant, and endpoint group configuration, and VXLAN overlays for tenant connectivity\nDeploy and support leaf-spine data center architectures, including fabric expansion, overlay design, and integration with compute and storage connectivity requirements\nDeploy and support SD-WAN across Palo Alto Prisma SD-WAN (CloudGenix) and FatPipe platforms, including overlay design, transport independence, application-aware routing policy, and failover behavior\nCoordinate circuit delivery with carriers and service providers, managing lead times, handover testing, and acceptance\nMonitor and manage WAN capacity, latency, and cost, recommending upgrades, re-homing, or transport changes\nWireless Networking - WLAN\nDeploy, configure, and support Aruba wireless infrastructure, including controllers, access points, and centralized WLAN management\nDeliver wireless design and validation, including predictive design, site surveys, RF tuning, channel and power planning, and post-deployment validation surveys\nSupport wireless authentication integration and guest access in partnership with the network security and identity teams\nTroubleshoot wireless performance, roaming, coverage, and interference issues, including in warehouse, laboratory, and manufacturing environments\nCore Network Services and Load Balancing\nDeploy and support core network services - DNS, DHCP, IP address management, NTP, and VPN termination points\nDeploy and support load balancing across F5, Array, and AVI platforms, including virtual servers, pools, health monitors, persistence, and SSL offload\nAutomate load balancer configuration and application onboarding through platform APIs, so recurring onboarding work is templated rather than hand-built\nSupport Zscaler traffic steering from the network side - tunnel and forwarding configuration, proxy routing, and validation of traffic paths to the cloud security platform\nSupport application onboarding from a network perspective - connectivity requirements, name resolution, certificates on network and load balancing platforms, firewall rule requests, and traffic flow validation\nMaintain accurate DNS and IP address records as a deployment output rather than an afterthought\nCloud and Hybrid Networking\nDeploy and support network infrastructure across AWS and Azure - landing zone networking, virtual networks and VPCs, subnetting, routing, peering, and transit architectures, provisioned and maintained through Terraform\nImplement and support hybrid connectivity between cloud, data centers, and sites, including ExpressRoute, Direct Connect, and IPSec VPN, with resilient and tested failover paths\nImplement hybrid and split-horizon DNS resolution across on-premises and cloud estates\nImplement and enforce cloud resource tagging standards for network resources, remediating missing or malformed tags to keep network CIs traceable to their application records\nSupport container and Kubernetes network connectivity requirements - ingress, egress, service exposure, and IP address planning - in partnership with platform teams\nOperational Support, Incident and Problem Management\nManage Move to Production processes for deployed CIs, ensuring proper handover to operational support teams and that all required GxP documentation is maintained\nProvide L2/L3 operational support for all deployed network CIs, working closely with managed-service partners\nParticipate in an on-call rotation, responding to network incidents outside business hours\nTroubleshoot connectivity, latency, packet loss, jitter, and throughput issues using Wireshark and NetScout, in partnership with engineering teams and service providers, driving down mean time to recovery (MTTR)\nDiagnose faults across the network stack - BGP and OSPF convergence and flapping, spanning tree and loop events, duplex and error counters, MTU and fragmentation, asymmetric routing, IPSec tunnel failures, DHCP scope exhaustion, and DNS resolution failures\nAct as technical escalation during Major Incidents, joining technical bridges and providing hands-on recovery and clear technical status updates\nContribute to Root Cause Analysis for recurring and high-impact issues, raising Problem records and driving corrective and preventive actions to closure\nMaintain high-quality incident resolution notes and knowledge articles to support first-line resolution and data-quality targets\nChange and Release Execution\nRaise, plan, and execute network changes with complete risk assessment, implementation plans, test evidence, and rollback procedures\nRepresent network changes at the Change Advisory Board (CAB), providing technical justification, impact analysis, and dependency detail drawn from CMDB service topology\nActively reduce change-induced incidents through peer review, automated validation, staged rollout, and disciplined post-implementation verification\nSchedule and coordinate deployment windows with application, business, and vendor stakeholders to minimize disruption, respecting manufacturing production schedules and site constraints\nObservability, Telemetry and AIOps\nOnboard network CIs into monitoring and observability platforms with meaningful metrics, logs, events, flow data, and synthetic checks\nImplement network telemetry and flow visibility - SNMP, streaming telemetry, and NetFlow or IPFIX - and use NetScout for packet-level and service-level performance visibility, making performance measurable ra...","description_format":"text","description_chars":23489,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Vaccines","Rare Disease Therapeutics","Immunology & Inflammation Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-13T13:34:56Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/sanofi-network-engineer-deployment-and-support","json_url":"https://alion.io/job/sanofi-network-engineer-deployment-and-support.json","meta":{"generated_at":"2026-10-14T12:08:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14732,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":146},"rest":"https://alion.io/mcp/rest/get_company?id=146"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsanofi-network-engineer-deployment-and-support"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsanofi-network-engineer-deployment-and-support"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsanofi-network-engineer-deployment-and-support"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sanofi-network-engineer-deployment-and-support\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsanofi-network-engineer-deployment-and-support"}]}