L2 / L3 Firewall & Network Security Engineer

The Firewall & Network Security Engineer is responsible for the operations, administration, support, optimization, and enhancement of enterprise Firewall and Network Security infrastructure. The role ensures secure, stable, and high-performing delivery of network security services across complex enterprise environments.

The engineer will work closely with Information Security, SOC, Network Operations, Infrastructure, Cloud, Audit, Application Teams, and OEM TAC teams to manage firewall and security services including policy administration, VPN, NAT, WAF, IDS/IPS, DDoS protection, NAC, and micro-segmentation technologies. The role includes incident handling, troubleshooting, upgrades, security optimization, and participation in architecture and transformation initiatives depending on experience level (L2/L3).

Experience Required L2 Level: 3–5 years of experience in Firewall / Network Security Operations & Support L3 Level: 5–8+ years of experience in Firewall / Network Security Engineering & Advanced Support Experience in enterprise production environments is required Primary Skills Required Firewall Technologies Hands-on experience with: Cisco Firepower / ASA Palo Alto Networks Firewall Check Point Firewall Fortinet Forti.

Gate WAF / Web Security F5 BIG-IP / ASM / Advanced WAF DDoS Protection ISP-based DDoS mitigation solutions Radware DDoS Protection IDS/IPS Trend Micro IPS/IDS Cisco Firepower IPS NAC (Network Access Control) Aruba Networks Clear. Pass (operational exposure preferred) NAC policy management, authentication/authorization, and endpoint access control AD/LDAP integration and access troubleshooting Micro-Segmentation Akamai Guardicore (knowledge or exposure preferred) Core Network Security Skills Firewall policy management and lifecycle operations VPN administration (site-to-site & remote access) NAT configuration and troubleshooting ACL and access control management Security rule optimization and cleanup HA configuration and troubleshooting Backup, restore, and recovery operations Firmware upgrades and patch management Incident handling and RCA Network segmentation and Zero Trust principles Good to Have Skills Cloud security exposure (AWS / Azure) SIEM integration and SOC operations awareness Load balancer and proxy/SWG concepts Security automation and monitoring tools Service.

Now and ITIL processes (incident, change, problem management) CAB and change management exposure Agile / SAFe environment exposure Basic scripting (Power. Shell / Python / Bash) Roles & Responsibilities L2 Responsibilities (Operational & Support Focus) Handle day-to-day firewall and network security operations Perform troubleshooting for firewall, VPN, NAT, and policy issues Manage incident tickets and provide L2 escalation support Implement firewall rule changes under SOP guidance Monitor security infrastructure health and compliance Support upgrades, patching, and maintenance activities Coordinate with OEM TAC for issue resolution Maintain operational documentation and reports L3 Responsibilities (Advanced / Engineering Focus) Lead critical incident resolution, escalations, and RCA activities Design, optimize, and govern firewall, VPN, NAC, WAF, and segmentation policies Perform advanced troubleshooting across integrated security environments Lead upgrades, migrations, onboarding, and transformation projects Drive security optimization, rule cleanup, and performance improvements Integrate security tools with SIEM, NAC, and ITSM platforms Mentor L1/L2 engineers and provide technical guidance Own SOPs, runbooks, architecture documents, and governance practices Participate in security architecture reviews, audits, and compliance discussions Enforce Zero Trust and least privilege security principles Preferred Candidate Profile Strong analytical and troubleshooting skills Good communication and stakeholder management abilities Experience in enterprise-scale production environments Ability to handle critical incidents and operational escalations Strong understanding of network security architecture and operations Requirements Role: L2 / L3 Firewall & Network Security Engineer Experience: 3–8+ Years Work Mode: Operations & Engineering (Enterprise Security Environment) Shift: 24/7 Rotational / On-call Support Location: Mumbai – Andheri / Vashi Employment Type: Full-time Mail your CVs along with a cover letter on hr@techsecdigital.

com or apply directly on company website. Note: Joining Immediate or within 1 month