L3 Network Security Engineer For Gurrgaon Location

L3 Netwrok Engineer:

Expert knowledge of Fortinet, Palo Alto, Cisco ASA/Firepower, Aruba, Cisco Meraki.

• Strong knowledge and hands-on experience with routing protocols: BGP, OSPF, EIGRP,
  RIP, and Static Routing.
• Deep understanding of switching fundamentals: STP, RSTP, MSTP, HSRP, VRRP,
  EtherChannel, and VLANs.
• Hands-on experience with Layer 2 and Layer 3 switch troubleshooting, including Cisco
  and Aruba environments.
• Expertise in SD-WAN solutions (Fortinet SD-WAN, Cisco Viptela, or others), including
  design, implementation, and troubleshooting.
• Proficiency in configuring and troubleshooting IPSec, GRE, DMVPN, and SSL VPNs.
• Hands-on with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) policy
  configuration, troubleshooting, and integration with endpoint clients.
• Working knowledge of network architecture, segmentation, and routing designs across
  hybrid environments (On-prem, Azure, GCP).
• Familiarity with Cisco, Aruba, Juniper, etc. stacking technologies, switch chassis
  configurations, and redundancy.
• Strong skills in Wireshark or other protocol analyzers to capture and troubleshoot
  complex network issues.
• Proficiency in LAN/WAN connectivity issues, performance optimization, and bandwidth
  management.
• Experience in deploying and troubleshooting dual WAN, traffic shaping, QoS, and WAN
  optimization.

Sensitivity: Confidential
(C2)

• Experience with dynamic routing and failover configurations in both campus and data
  center environments.
• Expertise in managing firewall and VPN policies in hybrid cloud using Fortinet, Palo
  Alto, and Cisco ASA firewalls.
• Hands-on with firewall rule base auditing, NAT/policy design, VPN troubleshooting
  (IPSec, SSL, DMVPN).
• Deep expertise in cloud-native security controls on GCP, Azure, and hybrid
  deployments.
• Strong skills in WAFs (Prophaze, Azure, Cloudflare), DDoS Mitigation, and load
  balancing.
• Understanding of PKI, certificate lifecycle management, and TLS configurations.
• Familiar with NAC systems (Aruba CPPM, Cisco ISE), 802.1x, posture assessments.
• Experience in Zero Trust Architecture, micro segmentation, and security baseline.
• Involved in security tool integrations (Zscaler, Defender for Endpoint, SIEM, Rapid7,
  Qualys, CrowdStrike).
• Strong audit and compliance understanding: GDPR, SOX, RBI, ISO, PCI-DSS.
• Skilled with network forensics using Wireshark, PCAP, and NetFlow tools.

Certifications (Preferred)

Sensitivity: Confidential
(C2)

• Fortinet NSE 7/8, Palo Alto PCNSE, Cisco CCNP Security, AWS/GCP/Azure Security
  Certifications.
• CISM, CISSP, CEH, or CRISC is a plus.Role & responsibilities

Preferred candidate profile

Perks and benefits