Network Security Consultant (L3)

**Role: Network Security Consultant (L3)

Location: US Onsite (Client Location- Michigan, Michigan, USA)** Experience Range: 10-14 years (preferred) Expectation from Stakeholders

• Share relevant profiles with hands-on L3 experience in the above technologies
• Candidates should be comfortable with client-facing roles and onsite engagement
• Preference for immediate joiners or short notice period

Role Summary We are looking for a highly skilled professional responsible for designing, implementing, troubleshooting, and optimizing enterprise network security solutions . The role requires deep expertise in firewalls, secure access technologies, proxy/security platforms, and incident management , supporting critical client infrastructure.

Key Technical Requirements Network Security & Firewall Platforms

• Cisco ASA (CSM), Cisco FTD (FMC)
• Palo Alto Firewalls (Strata Cloud Manager)
• Prisma Access
• Zscaler (ZIA & ZPA)
• Cisco Umbrella & WSA Proxy

VPN & Secure Access

• GlobalProtect VPN
• IPSEC / SSL VPN

Proxy & Security Technologies

• URL filtering, SSL/TLS decryption
• Proxy bypass, Client file management
• DNS security (Umbrella)
• O365 and cloud proxy integrations

Network Infrastructure

• Routing: BGP, OSPF
• Switching: VLANs, STP, EtherChannel
• Devices: Cisco ASR/ISR Routers, Nexus 9K

Core Responsibilities

• Provide L3 support and act as SME for network security technologies

• Manage and troubleshoot firewalls, VPN, proxy, and cloud security platforms

• Handle P1/P2 incidents, RCA, and problem management

• Execute changes aligned with ITIL processes

• Manage and optimize Cisco WSA (proxy) including:

• URL filtering, access control, HTTPS decryption

• Malware protection and policy configuration

• Perform firmware upgrades, patches, and maintenance activities

• Analyze logs, packet captures, and security alerts

• Collaborate with SOC, TAC, and cross-functional teams

• Maintain documentation, SOPs, and configurations

• Participate in client calls and technical discussions

Preferred Skills

• Certifications such as CCNP Security, PCNSE, Zscaler certifications
• Exposure to email security (ESA) is an added advantage
• Experience with automation/optimization initiatives