L2 Engineer(Network & Security Firewall)

NTT DATA BUSINESS SOLUTIONS; Mumbai; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

NTT DATA is seeking a Networking Managed Services Engineer (L2) in Mumbai to monitor, diagnose, and resolve medium-complexity incidents, ensuring IT infrastructure stays operational under SLAs. You will serve as the second-line specialist, reviewing tickets and driving resolution with cross-functional teams.

This hybrid role involves configuring and supporting enterprise firewalls, VPNs, and network security, while contributing to automation, change management, and disaster recovery efforts.

Qualifications

• Experience managing Palo Alto and Fortinet firewalls in enterprise/BFSI environments.
• Knowledge of RBI, ISO 27001 and PCI-DSS regulatory standards.
• Strong understanding of firewall and load balancer technologies.

Responsibilities

• Configure, manage, and troubleshoot enterprise firewalls across data centers and branch locations.
• Administer perimeter defenses, VPN gateways, and internal segmentation firewalls.
• Deploy security features like IPS/IDS, URL filtering, and DLP.
• Handle L2 configuration and support for load balancers, WAF, and SSL offloading.
• Maintain multi-DC, fault-tolerant infrastructure.
• Manage incident response for network and security events.
• Log changes and support change management processes.
• Assist with disaster recovery and automation initiatives.

Skills

Palo Alto

Fortinet FortiGate

VPN protocols

Routing & Switching fundamentals

Job description

Job Summary

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalated will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll elevate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

Workplace type

Hybrid Working

Responsibilities

• Configure, manage, and troubleshoot enterprise firewalls (Palo Alto, FortiGate, Checkpoint) across data canters, disaster recovery sites, and branch locations.
• Administer perimeter defences, VPN gateways, and internal segmentation firewalls to ensure secure access and traffic isolation.
• Deploy and maintain advanced security features including IPS/IDS, URL filtering, vulnerability protection, Wildfire, and DLP.
• Handle L2-level configuration and support for load balancers, enabling high availability, traffic steering, WAF, and SSL offloading.
• Maintain redundant, fault-tolerant infrastructure across multi-DC environments.
• Handle incident response and resolution for network and security events.
• Implement remediation plans for identified vulnerabilities.
• Should have knowledge of regulatory standards such as RBI, ISO 27001, and PCI-DSS.

Required Skills Expertise

• Palo Alto (Panorama, Wildfire, Threat Prevention)
• Fortinet FortiGate (VPN, HA, policy management)
• VPN protocols (IPSec, SSL VPN, Remote Access)
• Routing Switching fundamentals (especially BGP)

Strong understanding of

• Firewall and load balancer technologies
• TCP packet capture and analysis
• Cloud and hybrid network security (AWS, Azure, GCP)
• Certifications (Good to have) - PCNSE, Fortinet NSE4 or NSE7, CCNP, ITIL Foundation, Cloud security certifications (AWS/Azure)

Experience

• 57+ years in network and security operations
• Minimum 4 years managing Palo Alto and Fortinet firewalls, along with core routing/switching in enterprise or BFSI environments
• Experience in regulated financial sectors is highly desirable
• Proven success in managing high-availability, multi-DC infrastructures

Location

Mumbai