L3 Network Security & Firewall

Job Summary

We are seeking an experienced L3 Network Security & Firewall with strong expertise in Fortinet Security Solutions, Enterprise Network Infrastructure, Security Operations, Vulnerability Management. The ideal candidate should possess hands-on experience managing FortiGate firewalls, FortiManager, VPN technologies, enterprise switching environments, security monitoring, audit support, and vulnerability remediation activities.

Key Responsibilities

Network Security Administration

• Manage, configure, and troubleshoot FortiGate Firewalls across multiple locations.

• Administer and maintain FortiManager for centralized policy management and device administration.

• Perform firewall policy creation, modification, optimization, and periodic rule reviews.

• Configure and support:

• IPsec Site-to-Site VPN

• SSL VPN / Remote Access VPN

• Certificate-based VPN Authentication

• Manage NAT, VLANs, Routing, Security Policies, IPS, Application Control, and Web Filtering.

• Implement network segmentation and access control policies.

• Perform firewall firmware upgrades and security hardening.

Network Infrastructure Management

• Configure and troubleshoot:

• Layer 2 & Layer 3 Switches

• VLANs and Trunking

• STP, RSTP

• Static and Dynamic Routing

• LAN/WAN Connectivity

• Maintain network availability and performance.

• Troubleshoot network outages and connectivity issues.

Fortinet Security Administration

• FortiGate deployment and onboarding.
• FortiManager centralized administration.
• Global Policy Package management and installation.
• Device template management.
• Security profile management.
• VPN lifecycle management.
• Configuration backup and restore.
• HA implementation and troubleshooting.

Security Operations

• Monitor firewall and security events.

• Analyze logs and security alerts.

• Investigate:

• Unauthorized access attempts

• Malware communication

• Port scanning activities

• VPN-related issues

• Security policy violations

• Coordinate incident response activities with internal teams and vendors.

Vulnerability Management

• Review and analyze VAPT reports.
• Perform remediation tracking and closure validation.
• Coordinate firmware upgrades and security patching activities.
• Maintain vulnerability closure evidence.
• Manage asset inventory based on VAPT findings.
• Conduct configuration hardening as per security best practices.

Audit & Compliance

• Support on:

• ISO 27001 Audits

• SOC Audits

• ITGC Audits

• Internal Security Reviews

• Customer Security Audits

• Prepare and maintain audit evidence.

• Track audit observations and remediation activities.

• Participate in risk assessments and compliance reviews.

• Ensure adherence to change management processes.

Documentation & Reporting

• Maintain:

• Network Diagrams

• Asset Inventory

• SOP Documents

• Change Records

• Audit Evidence

• Security Reports

• Technical Documentation

• Generate periodic operational and compliance reports.

Required Technical Skills

Firewall & Security

• Fortinet FortiGate
• FortiManager
• Firewall Policies
• NAT Configuration
• IPS/IDS
• Application Control
• Web Filtering
• Security Profiles
• High Availability (HA)

VPN Technologies

• IPsec VPN
• SSL VPN
• Remote Access VPN
• Site-to-Site VPN
• Certificate-Based Authentication
• Multi-Factor Authentication (MFA)

Networking

• Switching
• VLAN
• Trunking
• STP/RSTP
• TCP/IP
• DNS
• DHCP
• Routing
• WAN Technologies
• Network Troubleshooting

Security Operations

• Log Analysis
• Security Monitoring
• Incident Handling
• Risk Assessment
• Access Reviews
• Change Management

Vulnerability & Compliance

• VAPT Analysis
• Vulnerability Remediation
• Patch Management
• Firmware Upgrades
• ISO 27001
• SOC Audit Support
• ITGC Controls
• Audit Evidence Preparation

Preferred Certifications

Fortinet

• FCP Network Security
• FCA
• FCF
• NSE Certifications

Networking

• CCNA
• CCNP Enterprise
• CCNP Security

Required Experience

• 8+ years of Network Security and Infrastructure experience.
• 5+ years of hands-on FortiGate administration.
• Experience with FortiManager centralized management.
• Hands-on experience with IPsec VPN and SSL VPN deployments.
• Experience supporting enterprise audits and compliance requirements.
• Strong exposure to vulnerability management and remediation activities.
• Experience in incident response and security operations.

Soft Skills

• Strong analytical and troubleshooting skills.
• Excellent communication and documentation skills.
• Ability to work with auditors, vendors, and internal stakeholders.
• Ownership-driven and proactive approach.
• Strong attention to detail in audit and compliance activities.

Role: L3 Network Security & Firewall
Department: Network Security & Information Security
Experience: 8-12 Years
Location: Bengaluru
CTC: As per company standards and experience.