Network Security L3 Engineer

Role Overview

We are looking for an experienced Network Security Engineer to design, implement, maintain, and secure enterprise network infrastructure. The role requires a strong understanding of network security principles, hands-on experience with security technologies, and the ability to troubleshoot complex network and security issues.

The ideal candidate will work closely with network, infrastructure, cloud, application, and security teams to ensure secure, resilient, and highly available network environments. The candidate should be comfortable handling security incidents, performing root-cause analysis, implementing security controls, and contributing to continuous improvement of the organization's network security posture.

Key Responsibilities

• Design, implement, configure, and maintain enterprise network security infrastructure.
• Manage and support network security technologies including firewalls, VPNs, IDS/IPS, secure gateways, and network access controls.
• Configure and maintain security policies, access rules, NAT, VPN tunnels, and related network security controls.
• Monitor network traffic and security events to identify potential threats, anomalies, and unauthorized access.
• Troubleshoot complex network connectivity and security-related issues and perform root-cause analysis.
• Investigate and respond to network security incidents in coordination with security and infrastructure teams.
• Review firewall and network security rules regularly and ensure they follow established security standards and business requirements.
• Support secure connectivity across data centers, corporate networks, remote locations, cloud environments, and third-party networks.
• Participate in network security assessments, vulnerability remediation, and security hardening activities.
• Implement and maintain network segmentation and access-control mechanisms.
• Work with internal teams to assess security requirements for new applications, infrastructure, and network changes.
• Participate in change management, implementation, and post-change validation activities.
• Maintain network security documentation, architecture diagrams, configurations, and operational procedures.
• Contribute to security improvement initiatives, automation, standardization, and operational efficiency.
• Work with vendors and technology partners for issue resolution, upgrades, and technical escalations.
• Ensure network security operations align with organizational policies, industry standards, and compliance requirements.

Required Skills

• Strong experience in network security engineering and enterprise networking.
• Good understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, routing, switching, VLANs, and network protocols.
• Hands-on experience with enterprise firewalls and security gateways.
• Strong understanding of VPN technologies, IPsec, SSL/TLS, NAT, and access-control policies.
• Experience with IDS/IPS, network monitoring, traffic analysis, and security event investigation.
• Experience troubleshooting network and security issues across complex environments.
• Good understanding of network security architecture, segmentation, and secure connectivity.
• Experience with incident management, change management, and root-cause analysis.
• Familiarity with security best practices, vulnerability management, and network hardening.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.

Preferred Skills

• Experience with security technologies from vendors such as Palo Alto, Fortinet, Cisco, Check Point, or similar.
• Exposure to cloud networking and cloud security across AWS, Azure, or GCP.
• Knowledge of Zero Trust, SASE, SD-WAN, or network access control concepts.
• Experience with security monitoring/SIEM platforms.
• Exposure to scripting or automation using Python, PowerShell, or similar technologies.
• Relevant certifications such as CCNA/CCNP Security, PCNSE, Fortinet certifications, or equivalent are an advantage.

Key Competencies

• Network Security Engineering
• Enterprise Network Troubleshooting
• Firewall & VPN Management
• Security Incident Handling
• Network Monitoring & Analysis
• Security Hardening
• Root-Cause Analysis
• Risk & Vulnerability Awareness
• Change & Configuration Management
• Stakeholder Communication
• Problem Solving
• Documentation & Process Discipline

Roles & Responsibilities:-

1. Provide technical support to customers via phone, email, and ticketing system regarding Palo Alto Networks security products
2. Troubleshoot and resolve customer issues related to firewall policies, network connectivity, VPN configurations, threat prevention, and security features
3. Collaborate with customers, cross-functional teams, and vendors to diagnose and resolve complex technical issues
4. Perform system configurations and assist customers with initial product installations, upgrades, and migrations
5. Monitor and analyze system logs and events to identify and respond to security threats and performance issues
6. Document customer interactions, troubleshooting steps, and solutions in a knowledge base
7. Stay up-to-date with latest trends and advancements in network security technologies and industry best practices

Ideal Candidate:-

1. Strong Firewall / Network Security Support Profile with Palo Alto exposure
2. Mandatory (Experience 1): Must have around 2 years of experience in network security, with hands-on firewall support (Palo Alto preferred), and knowledge of network security concepts and protocols (TCP/IP, VPN, SSL/TLS, IDS/IPS, next-generation firewalls).
3. Mandatory (Experience 2): Must be able to perform system configurations and assist with installations, upgrades, and migrations, and monitor/analyse system logs and events to respond to security threats and performance issues.
4. Mandatory (Tech skill): Must be able to troubleshoot firewall policies, network connectivity, VPN configurations, and threat-prevention issues, with a basic understanding of network infrastructure (routers, switches, load balancers).
5. Mandatory (Skill): Must have strong analytical and problem-solving skills, provide support via phone/email/ticketing, document interactions and solutions in a knowledge base, and collaborate with customers, cross-functional teams, and vendors.
6. Mandatory (Domain): Banking-industry experience preferred; strong candidates with the same technical experience from another industry are acceptable.
7. Mandatory (Note): Must be comfortable with a 24/7 rotational shift environment and on-call support at the client site (IDFC Bank, Airoli, Navi Mumbai)
8. Mandatory (Communication): Must have excellent verbal and written communication, able to explain technical concepts clearly.
9. Preferred (Product / Education): Familiarity with Palo Alto Networks products (PAN-OS, GlobalProtect, WildFire); Bachelor's degree in Computer Science, IT, or a related field.

Job Description

Education Qualification

Label Value Education Qualification Engineer - B.E / B.Tech / MCA

Skills

Primary -> Technology | WAN/LAN/Security | 4 - Advanced 

Primary -> Technology | Cisco | 4 - Advanced 

Primary -> Technology | Palo alto | 4 - Advanced 

Primary -> Technology | Fortinet | 4 - Advanced 

Primary -> Technology | Meraki | 4 - Advanced 

Secondary -> Technology | Zscaler | 4 - Advanced 

Tertiary -> Technology | Cloud Networking | 4 -

Advanced Certification Technology | NSE4 | PCNSE | CCNP | ECMS1 | ZIA/ZPA - Admin | AZ-900/AWS solutions architect (associate)

Contract - 6 Months

Experience - 10-12 years 

Qualifications

• 8+ years of relevant technical I.T. infrastructure or operations experience.
• Experience with, and ability to design, deploy, manage, and troubleshoot wireless & wired network equipment and protocols in a medium-large campus environment.
• In-depth knowledge in WAN transport systems/services, Telecommunications systems/service, LAN switch technology (including Spanning tree, VTP domain management), routing protocols (EIGRP, OSPF, BGP4), Software-Defined technology (SD-WAN).
• Proven ability to manage a multi-vendor WAN, multi-protocol routing, including but not limited to NHRP, EIGRP, BPG4, OSPF and RIPv2.
• Strong hands-on experience on Fortinet SD-WAN, Forti Switch/AP, Forti-Manager, Forti-Analyzer, Fortinet Firewalls.
• Hands-on experience on Switching, Wireless, Firewall and Load balancer technologies (Any OEM).
• Demonstrated ability to manage multiple projects in an efficient manner.
• Proven experience of LAN/WAN/Security design & implementation experience; completing projects wing2wing from planning>design>implementation.
• Work with project managers and other teams to achieve project deadlines.
• Demonstrated excellence in communications, presentation and customer focus skills.
• Certified in Fortinet NSE4 or higher.

Deliverables

• Understand / discuss solution with customer and internal technical teams.
• Take ownership of HLDs and LLDs for SDWAN implementations.
• Build customer relationships to gain a deep understanding of business and technical requirements.
• Implementation of solutions and achieve successful implementation within proposed Project timelines.
• Provide customers with technical guidance that is based on strong technical skills and informed by the customer’s needs.
• Help leads with process improvement – like pre-approved change template creation, effective implementation of internal processes.
• Act as technical mediator between Solutions Team, Product team to review new product implementation guides.

🚨 We're Hiring: Network Engineer 🚨

ZigZag AI is looking for a Network Engineer with 1+ year of hands-on experience to join our team!

What we're looking for:

🔹 Solid working knowledge of Firewalls & Firewall Rules

🔹 Experience with NVR/DVR systems

🔹 Strong understanding of Port Forwarding & NAT

🔹 Good communication skills — both Hindi and English are a must

Compensation: ₹4 LPA

About ZigZag AI:

Zigzag AI is building the future of operational intelligence. Our AI connects to existing cameras and helps businesses understand what is happening on the ground, spot issues early, and take action faster. From shops and bungalows to hotels, factories, and hospitals, Zigzag helps teams run smoother, safer, and smarter operations every day.

This is not just monitoring. This is AI that drives execution.

Trusted by leading clients such as Tata, Birla, Treebo, JP Minda, Philips, and many more.

If you're someone who enjoys solving real-world networking problems and wants to grow with a fast-paced, mission-driven team, we'd love to hear from you!

#Hiring #NetworkEngineer #ITJobs #FirewallEngineer #CCTV #NVR #DVR #JobOpening #ZigZagAI #OperationalIntelligence

Network Engineer – L3

Location: Mumbai | On-site

Experience: 8–10 Years

Key Responsibilities:

• Install, configure, maintain and troubleshoot network & security infrastructure.
• Handle LAN/WAN, BGP, OSPF, HSRP/VRRP, VLAN, STP, SVI & LACP.
• Manage Cisco/Juniper switches, routers and firewalls.
• Work on Fortinet/Checkpoint/Juniper/Cisco firewalls, SD-WAN & ACI-SDN.
• Troubleshoot VPN, NAT, GRE, P-VPN, routing and connectivity issues.
• Monitor network performance using NMS, SNMP & Syslog.
• Coordinate with customers, vendors and TAC teams for issue resolution.
• Support data centre connectivity, network projects and RFP specifications.
• Participate in network upgrades, maintenance and troubleshooting.

Key Skills:

• Strong TCP/IP, IPv4/IPv6, BGP, OSPF, HSRP/VRRP knowledge.
• Hands-on experience with Cisco/Juniper/Mellanox/Dell/Arista.
• Firewall experience with Fortinet/Checkpoint/Cisco/Juniper.
• Experience in Data Centre environments.
• Good communication and troubleshooting skills.
• Willingness to work in shifts, weekends and holidays.

Technical Consultant – Palo Alto Networks

Company: Inflow Technologies

Website: https://inflowtechnologies.com

About: Founded in 2005, Inflow Technologies is a niche IT Infrastructure Distribution Services player offering Value Added Distribution in Networking, Cybersecurity, UCC, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ in Bangalore, 20+ locations, 120+ certified technical resources, USD 700M+ annual run-rate revenue.

Location: Bangalore

Work Mode: Work From Office

Work Days: 5 days/week

Position Overview

Senior-level, high-impact technical role driving architecture, implementation, and optimization of Palo Alto Networks' enterprise security solutions. Acts as SME bridging security engineering and client-facing technical consultation.

Key Responsibilities

• Design, deploy, and optimize Palo Alto NGFW solutions in complex enterprise environments
• Provide L3/L4 escalation support for Palo Alto firewall, Prisma, and Cortex-related issues (PAN-OS)
• Architect and implement: Prisma Access (SASE/ZTNA), Prisma Cloud (CSPM, CWPP, CNAPP), Cortex XDR/XSOAR
• Advanced troubleshooting: traffic flow issues, security policy mismatches, VPN (IPSec/GlobalProtect), threat prevention, URL filtering, SSL decryption
• Lead end-to-end implementation projects (design, deployment, migration, optimization)
• Integrate Palo Alto solutions with SIEM/SOC platforms, IAM (SAML, Azure AD, Okta), and public cloud (AWS, Azure, GCP)
• Manage HA, clustering, and firewall upgrades
• Liaise with Palo Alto TAC for critical issue resolution
• Conduct security assessments, best practice reviews, and performance tuning
• Maintain technical documentation (HLDs/LLDs, SOPs, runbooks)
• Mentor L1/L2 engineers
• Participate in change management, maintenance windows, and incident response

Requirements

• Experience: 6–12 years in network and security engineering (min 6 years)
• Education: Bachelor's degree in Computer Science, Engineering, or related field

Process

• Interview Rounds: 2 Virtual + Final Face-to-Face

Job Summary:

We are looking for an experienced Network Engineer with , Check Point firewalls, network security, and routing protocols. The ideal candidate should have experience in network troubleshooting, firewall configuration, security policy management, and maintaining reliable network infrastructure.

Key Responsibilities:

• Work on Check Point firewall administration, security policies, and rule management.
• Configure and maintain firewall policies, NAT, VPNs, and access control rules.
• Troubleshoot network connectivity issues and firewall-related incidents.
• Implement and support routing protocols such as BGP, OSPF, and static routing.
• Monitor network performance, investigate network issues, and ensure network availability.
• Perform firewall upgrades, configuration backups, and security policy reviews.
• Work on network security, incident resolution, and root cause analysis.
• Coordinate with network, security, and infrastructure teams to resolve technical issues.

Mandatory Skills:

• Network Engineering and troubleshooting
• Check Point Firewall
• Routing Protocols (BGP, OSPF, Static Routing)
• Firewall configuration and security policy management

Secondary Skills:

• Python scripting and network automation
• VPN, NAT, and network security
• Firewall monitoring and troubleshooting
• Incident management and root cause analysis

Technical / Behavioral-

• Working experience on Juniper SRX Firewalls and Checkpoint Firewalls
• working experience on Routing Protocols: BGP, OSPF, VPNs, Switching and STP, VX LAN
• Coding Knowledge on Python and Ansible
• Troubleshoot issues related to the network and Security environment.
• Experience with ITIL and Project Management.
• Ability to work in a team environment.
• Strong knowledge on IPS/IDS, Packet Capture Analysis.
• Communication and presentation skills.
• Documentation of complex technologies and topologies based on based practices.
• Experience with Wireshark packet captures.
• Experience in Automation, Python and Ansible

Job Summary

We are looking for an experienced Network Engineer with strong expertise in network security, firewall administration, Check Point, Juniper SRX, routing protocols, and Python scripting. The candidate will be responsible for managing, configuring, troubleshooting, and optimizing enterprise network infrastructure while ensuring secure and reliable connectivity.

Key Responsibilities

• Configure, manage, and troubleshoot enterprise network devices, firewalls, and security appliances.
• Administer and maintain Check Point firewalls, including security policies, NAT rules, VPNs, and access control.
• Manage Juniper SRX firewalls, including security zones, policies, NAT, IPsec VPNs, and threat prevention.
• Implement and troubleshoot routing protocols such as BGP, OSPF, EIGRP, and static routing.
• Perform network troubleshooting related to connectivity, packet loss, latency, routing, and firewall traffic.
• Configure and maintain site-to-site VPNs and remote-access VPN solutions.
• Monitor network performance, analyze traffic logs, and investigate security incidents.
• Perform firewall rule reviews, configuration backups, software upgrades, and security patching.
• Develop Python scripts to automate network configuration, monitoring, reporting, and routine operational tasks.
• Work with network monitoring tools, packet analyzers, and logging platforms to identify and resolve network issues.
• Participate in incident management, root cause analysis (RCA), change management, and network maintenance activities.
• Maintain network documentation, configuration standards, and operational runbooks.

Senior Network Security Engineer (Microsegmentation) 

Key Responsibilities 

• Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. 
• Develop and support comprehensive solutions that meet requirements and align with HPE’s global network security and microsegmentation strategy. 
• Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models. 
• Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. 

Microsegmentation & Zero Trust Responsibilities 

• Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access. 
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement. 
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation. 
• Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments. 
• Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. 
• Lead adoption of microsegmentation platforms (e.g, Guardicore/Akamai Segmentation). 
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). 

Core Network Security Responsibilities 

• Participate in network security design reviews and ensure all implementations meet enterprise security standards. 
• Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments. 
• Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting. 
• Conduct and support internal and external security audits and compliance assessments. 
• Maintain awareness of emerging threats and update policies accordingly. 
• Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. 
• Manage and optimize Security Information and Event Management (SIEM) systems. 
• Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. 

Technical Qualifications 

• 10+ years of experience in enterprise network security architecture, engineering, and operations. 

Microsegmentation & Advanced Security 

• Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments. 
• Proven capability to build application-aware segmentation policies based on traffic flow analysis. 
• Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms. 
• Understanding of east-west traffic inspection, workload protection, and software-defined segmentation. 
• Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. 

Network Security & Infrastructure 

• Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC. 
• Expertise in firewall architecture and design with hands-on experience in:  
• Fortinet (Fortigate), Palo Alto, Juniper 
• Policy design, NAT, routing, application control, and threat prevention profiles 
• Experience securing public and private cloud (AWS, Azure, GCP) environments. 
• Design and implementation of Web Application and API Protection (WAAP) solutions. 
• Strong experience in proxy (forward/reverse), load balancing, and application security integration. 
• Experience with SDN and SD-WAN architectures, including segmentation use cases. 

Networking & Protocol Expertise 

• Strong knowledge of:  
• Routing protocols: BGP, OSPF, RIP, MPLS 
• Network services: DNS, DHCP, NTP 
• IPv4/IPv6 architecture and traffic management 
• Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants). 
• Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions. 

Data Center & Infrastructure 

• Experience managing enterprise data center environments with technologies including:  
• Aruba, Arista, Juniper switching 
• Firewalls, WAN optimization, IDS/IPS, DLP 
• Strong understanding of structured cabling and network facilities. 

Operations & Lifecycle Management 

• Plan, implement, and document infrastructure changes, including upgrades and migrations. 
• Work within ITIL frameworks for incident, change, and problem management. 

Education & Certifications 

• Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience). 
• 10+ years of experience in global network security environments. 
• Preferred certifications:  
• CCNP / CCIE 
• JNCIE 
• Security certifications (CISSP, CISM, or equivalent) are a plus 

Key Differentiators Added (for your context) 

This version strengthens the JD by: 

• Embedding microsegmentation as a core capability (not just one bullet) 
• Aligning with Zero Trust and application dependency mapping (important for your programs) 
• Emphasizing cross-team collaboration with application owners (critical for rollout success) 
• Integrating segmentation with existing firewall + SIEM ecosystem (not replacing, but complementing)