Network Security Engineer L3

About the role

Act as the Level 3 escalation point for critical P1/P2 incidents and complex network issues. Lead advanced troubleshooting across LAN, WAN, WLAN, Data Center, Cloud, Security, DDI, and Load Balancer environments. Drive Root Cause Analysis (RCA), Problem Management, and implementation of permanent corrective actions.

Key responsibilities

• Support Cisco ACI fabric operations, including VRF management, EPG health checks, leaf commissioning/decommissioning, and fabric troubleshooting
• Manage routing and switching technologies including BGP, OSPF, VLANs, VRFs, QoS, and network segmentation
• Provide expert support for WAN, Internet, MPLS, SD-WAN, VPN, and hybrid connectivity solutions
• Lead implementation of approved network and security changes, migrations, upgrades, and technology refresh activities
• Support firewall, proxy, VPN, NAC, and secure access platforms, including policy management and security incident resolution
• Manage F5 load balancer platforms including VIPs, Pools, SSL certificates, HA validation, and platform upgrades
• Support AWS networking services including VPCs, Transit Gateway, Route Tables, Direct Connect, VPN, Security Groups, and NACLs
• Perform capacity planning, availability reviews, performance analysis, and resiliency assessments
• Coordinate with OEMs, TAC teams, ISPs, and service providers for complex issue resolution and restoration activities
• Drive compliance reviews, configuration baseline validation, drift management, audit support, and remediation activities

About you

• 8-12 years of experience in Network and Network Security Operations
• Experience supporting enterprise environments across Data Center, Campus, WAN, Cloud, and Security domains
• Hands-on experience in troubleshooting and supporting firewalls, routing, switching, VPNs, load balancers, DDI platforms, and cloud networking
• Enterprise Networking: Cisco ACI, Cisco Nexus, Cisco Catalyst, Cisco DNAC, Routing & Switching, BGP, OSPF, VLANs, VRFs, QoS, LAN, WAN, WLAN, MPLS, SD-WAN
• Network Security: Palo Alto Firewalls, Check Point Firewalls, Cisco FTD/ASA, Fortinet Firewalls, Azure Firewall, Cisco ISE, VPN Technologies, Zscaler (ZIA/ZPA), Bluecoat Proxy, Secure Web Gateway Technologies
• Application Delivery & Load Balancing: F5 BIG-IP LTM, GTM, APM, SSL Certificate Management, High Availability and Failover Technologies
• DDI Services: Infoblox, BloxOne, DNS, DHCP, IPAM
• Cloud Networking: AWS Networking, VPC, Transit Gateway, Route Tables, Direct Connect, VPN Connectivity, Security Groups, NACLs
• Automation & Observability: Ansible Automation Platform, BMC Helix, Datadog, Grafana, Network Automation, Self-Healing Workflows