L2 / L3 Firewall & Network Security Engineer

The Firewall & Network Security Engineer is responsible for the operations, administration, support, optimization, and enhancement of enterprise Firewall and Network Security infrastructure. The role ensures secure, stable, and high-performing delivery of network security services across complex enterprise environments.

The engineer will work closely with Information Security, SOC, Network Operations, Infrastructure, Cloud, Audit, Application Teams, and OEM TAC teams to manage firewall and security services including policy administration, VPN, NAT, WAF, IDS/IPS, DDoS protection, NAC, and micro-segmentation technologies.

The role includes incident handling, troubleshooting, upgrades, security optimization, and participation in architecture and transformation initiatives depending on experience level (L2/L3).

• L2 Level: 3–5 years of experience in Firewall / Network Security Operations & Support
• L3 Level: 5–8

• years of experience in Firewall / Network Security Engineering & Advanced Support

• Experience in enterprise production environments is required

Hands-on experience with:

• Cisco Firepower / ASA

• Palo Alto Networks Firewall

• Check Point Firewall

• Fortinet FortiGate

• F5 BIG-IP / ASM / Advanced WAF

• ISP-based DDoS mitigation solutions

• Radware DDoS Protection

• Trend Micro IPS/IDS

• Cisco Firepower IPS

• Aruba Networks ClearPass (operational exposure preferred)

• NAC policy management, authentication/authorization, and endpoint access control

• AD/LDAP integration and access troubleshooting

• Akamai Guardicore (knowledge or exposure preferred)

• Handle day-to-day firewall and network security operations

• Perform troubleshooting for firewall, VPN, NAT, and policy issues

• Manage incident tickets and provide L2 escalation support

• Implement firewall rule changes under SOP guidance

• Monitor security infrastructure health and compliance

• Support upgrades, patching, and maintenance activities

• Coordinate with OEM TAC for issue resolution

• Maintain operational documentation and reports

• Lead critical incident resolution, escalations, and RCA activities

• Design, optimize, and govern firewall, VPN, NAC, WAF, and segmentation policies

• Perform advanced troubleshooting across integrated security environments

• Lead upgrades, migrations, onboarding, and transformation projects

• Drive security optimization, rule cleanup, and performance improvements

• Integrate security tools with SIEM, NAC, and ITSM platforms

• Mentor L1/L2 engineers and provide technical guidance

• Own SOPs, runbooks, architecture documents, and governance practices

• Participate in security architecture reviews, audits, and compliance discussions

• Enforce Zero Trust and least privilege security principles

• L2 Level: 3–5 years of experience in Firewall / Network Security Operations & Support
• L3 Level: 5–8

• years of experience in Firewall / Network Security Engineering & Advanced Support

• Experience in enterprise production environments is required