L3 Network Security Engineer (Managed Firewall and Network Infra)

Saint Fox Consultancy Private Limited; Pune District; On-site; INR 510,000 - 560,000; Full time

Job summary

Saint Fox Consultancy Private Limited in Chennai seeks an experienced Network Security Engineer (L3/Lead) to design, deploy, and manage enterprise firewall architectures, including Cisco ASA/FTD and Palo Alto NGFW, across multi-site environments.

The role emphasizes governance, change management, and mentoring L1/L2 engineers, with a strong focus on Zero Trust, threat prevention, and proactive vulnerability management.

Qualifications

• 8 to 15 years of hands-on experience in network security engineering.

Responsibilities

• Design, deploy, and manage Cisco ASA/FTD and Palo Alto firewall platforms.
• Configure and manage Cisco Catalyst/Nexus switching and WLC WLAN infrastructure.
• Oversee site-to-site and remote access VPN and SD-WAN integration where applicable.
• Own change management for network security changes including planning, testing, and rollback procedures.
• Mentor L1/L2 engineers and provide technical guidance.

Tools

Cisco ASA/FTD firewalling

Palo Alto NGFW & Panorama

Cisco Catalyst & Nexus switching

WLC management

Job description

Network Security Engineer

Posted by Pepplo Consulting

Network Security Engineer L3/Lead _ Chennai

Network Security Engineer / Firewall Security Engineer

At Saint Fox, we truly appreciate the healthy balance between work and personal life, which allows us to perform at our best without compromising well-being. The company strongly supports skill development through continuous learning opportunities, helping us grow professionally. Salary and Hikes are competitive and fair, and the positive company culture fosters collaboration, respect and inclusivity. We also value the strong sense of job security and the transparent opportunities for promotions and career advancement. Above all, the overall work satisfaction here makes saint fox a rewarding and inspiring place to build a long-term career.

Dislikes

High expectations are set, which can be challenging, but they push us to perform at our best. Since the company is growing rapidly, process are still evolving. Which gives us a chance to contribute ideas and improvement.

Network Security Engineer in Saint Fox Consultancy Private Limited typically earns between

₹5.1 - ₹5.6 L/yr See detailed salary breakup Powered by

Firewall Operations

• Design, deploy, and manage Cisco ASA and Firepower Threat Defense (FTD) firewalls in enterprise and multi-site environments.
• Operate and tune Palo Alto Networks next-generation firewalls including policy management, App-ID, User-ID, and threat prevention profiles.
• Manage Palo Alto Panorama for centralised policy and device management across multiple firewalls.
• Perform rule-base reviews, clean-up, and optimisation on a scheduled basis to reduce attack surface and policy drift.
• Respond to and resolve L3 firewall incidents and escalations within agreed SLA windows.

Network Infrastructure

• Configure and manage Cisco Catalyst and Nexus switching platforms including VLANs, STP, VPC, and QoS.
• Administer Cisco Wireless infrastructure including WLC (Wireless LAN Controllers) and Cisco Access Points across campus and branch environments.
• Troubleshoot complex Layer 2 and Layer 3 network issues from physical through to application layer.
• Maintain and enforce network segmentation policies aligned to Zero Trust principles.

Routing and Connectivity

• Configure and manage dynamic routing protocols including OSPF, BGP, and EIGRP.
• Manage site-to-site and remote-access VPN including Cisco AnyConnect and Palo Alto Global Protect.
• Support SD-WAN and SASE integration efforts where applicable.
• Operations and Governance
• Own change management for network security changes including planning, testing, and rollback procedures.
• Maintain accurate and current network diagrams, run books, and configuration documentation.
• Participate in vulnerability and patch management cycles for network devices.
• Support internal and external audits by providing evidence and configuration reviews.
• Provide mentoring and technical guidance to L1 and L2 engineers.

Required Skills

• 8 to 15 years of hands-on experience in network security engineering.
• At least 4 years working at L3 or equivalent senior engineer level.
• Demonstrated production experience with Cisco ASA and/or FTD firewalls.
• Demonstrated production experience with Palo Alto Networks NGFW and Panorama.
• Solid experience with Cisco Catalyst and Nexus switching in enterprise environments.
• Working experience with Cisco WLC and enterprise access point management.

Technical Skills

• Cisco Firewall: ACLs, NAT, VPN, HA, and Firepower management centre.
• Cisco Switching: VLAN, STP, RSTP, VPC/vPC, port-channel, QoS, and SPAN.
• Cisco Wireless: WLC management, AP provisioning, SSID design, RF planning basics, and client troubleshooting.
• Palo Alto: Security policies, NAT, decryption, URL filtering, Wildfire, Panorama, and HA configuration.
• Routing: OSPF, BGP, EIGRP, PBR, and route redistribution.
• VPN: IPsec, SSL-VPN, GlobalProtect, and AnyConnect.
• Packet analysis using Wireshark or equivalent.
• Working knowledge of NAC, 802.1X, and RADIUS.

Skills highlighted with ‘‘ are preferred keyskills

St. Fox, a leading consultancy in the realm of Cybersecurity and advanced tech solutions, is recognized for its pioneering approach to digital security and innovation. Driven by the ethos "Innovate Fearlessly, Protect Relentlessly," we empower businesses globally to secure their operations and maximize efficiency through cutting-edge technology strategies.

Company Info