Network Security Engineer-L2

SHI Solutions India Pvt. Ltd.; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

SHI Solutions India Pvt. Ltd. is seeking a Network Security L2 Engineer to provide hands-on FortiGate firewall management, incident handling, and proactive monitoring for enterprise networks.

You will work closely with network, SOC, and cloud teams to maintain high security posture and uptime. The role involves configuring VPNs, policies, and security profiles, performing RCA for recurring issues, and coordinating with Fortinet TAC for advanced resolutions.

Qualifications

• Strong hands-on experience with Fortinet FortiGate Firewalls.
• Expertise in firewall policy configuration and rule optimization.
• NAT, ACLs, and traffic flow analysis.
• TCP/IP, OSI Model, subnetting fundamentals.
• Static routes, OSPF and BGP fundamentals.
• IPSec and SSL VPN configuration and troubleshooting.
• IDS/IPS concepts and deployments.
• FortiManager and FortiAnalyzer (preferred).
• SIEM tools such as Splunk or QRadar.
• Monitoring tools like SolarWinds or PRTG.
• Fortinet NSE4/NSE5/NSE6 certifications.
• CCNA/CCNP (Security or Routing & Switching).
• Exposure to multi-vendor firewall environments (Palo Alto, Cisco ASA/Firepower, Check Point).
• Strong analytical and troubleshooting skills.
• Effective communication and stakeholder management.
• Ability to work independently and under pressure.
• Proactive approach to problem-solving.

Responsibilities

• Provide Level 2 support for network security issues, incidents, and service requests.
• Act as an escalation point for L1 engineers, ensuring timely resolution within defined SLAs.
• Perform root cause analysis (RCA) for recurring network and firewall-related issues.
• Handle incident prioritization, troubleshooting, and resolution for critical outages.
• Implement, configure, and maintain FortiGate firewall policies, including access control, NAT, and user-based policies.
• Configure IPS/IDS, VPNs, and monitor security health with FortiAnalyzer/FortiManager.
• Monitor logs and traffic, analyze anomalies, and ensure high availability.
• Execute firewall changes per ITIL change management; perform firmware upgrades and patching.
• Document network diagrams, firewall rules, and incident reports.
• Coordinate with SOC, network, cloud teams and Fortinet TAC for issue resolution.

Skills

Fortinet FortiGate Firewalls

Policy optimization

NAT

ACLs

Traffic analysis

TCP/IP

OSI Model

Subnetting

Static routing

OSPF

BGP fundamentals

IPSec VPN

SSL VPN

IDS/IPS

FortiManager

FortiAnalyzer

Splunk

QRadar

SolarWinds

PRTG

NSE4

NSE5

NSE6

CCNA

CCNP

Palo Alto

Cisco ASA/Firepower

Check Point

Tools

FortiManager

FortiAnalyzer

Splunk

QRadar

SolarWinds

PRTG

Job description

About the Role

We are hiring a

• Provide Level 2 support for network security issues, incidents, and service requests.
• Act as an escalation point for L1 engineers, ensuring timely resolution within defined SLAs.
• Perform root cause analysis (RCA) for recurring network and firewall-related issues.
• Handle incident prioritization, troubleshooting, and resolution for critical outages.

Job Description

We are hiring a Network Security L2 Engineer with strong hands-on expertise in Fortinet or FortiGate firewalls to manage, monitor, and support enterprise-level network security infrastructure. The candidate will play a crucial role in incident handling, firewall configuration, and proactive monitoring, ensuring high availability and security compliance.

Roles & Responsibilities

Incident Management & L2 Support

• Provide Level 2 support for network security issues, incidents, and service requests.
• Act as an escalation point for L1 engineers, ensuring timely resolution within defined SLAs.
• Perform root cause analysis (RCA) for recurring network and firewall-related issues.
• Handle incident prioritization, troubleshooting, and resolution for critical outages.

Firewall Configuration & Management

• Implement, configure, and maintain FortiGate firewall policies, including:
• Access control policies
• NAT and port forwarding rules
• User-based policies
• Configure and troubleshoot:
• IPSec VPN (Site-to-Site)
• SSL VPN (Remote access)
• Manage and fine-tune security profiles such as:
• IPS (Intrusion Prevention)
• Antivirus
• Web Filtering
• Application Control

Monitoring & Performance Management

• Monitor firewall health, logs, and traffic using:
• FortiAnalyzer / FortiManager
• SIEM tools (if applicable)
• Analyze logs for anomalies, threats, and performance issues.
• Ensure high availability and uptime of security devices.
• Perform capacity planning and tuning of firewall resources.

Change & Patch Management

• Execute firewall changes as per change management processes (ITIL).
• Perform firmware upgrades, patching, and maintenance activities.
• Validate changes post-implementation to ensure no service disruption.

Security & Compliance

• Participate in security audits and vulnerability assessments.
• Identify security gaps and recommend mitigation strategies.
• Ensure firewall rules and configurations align with organizational security policies.

Documentation & Reporting

• Maintain detailed documentation of:
• Network diagrams
• Firewall rules
• Incident reports and SOPs
• Generate reports on incidents, performance, and capacity metrics.

Collaboration & Vendor Coordination

• Work closely with:
• Network teams
• Cloud/Infrastructure teams
• SOC and security teams
• Coordinate with Fortinet TAC and vendors for advanced issue resolution.

Requirements

Job Requirements

Required Technical Skills

Core Skills (Mandatory)

• Strong hands-on experience with:
• Fortinet FortiGate Firewalls
• Expertise in:
• Firewall policy configuration and rule optimization
• NAT, ACLs, and traffic flow analysis
• In-depth knowledge of:
• TCP/IP, OSI Model, Subnetting
• Basic routing concepts (static routes, OSPF/BGP fundamentals)

Networking & Security

• Experience in:
• IPSec VPN & SSL VPN configuration and troubleshooting
• IDS/IPS concepts and deployments
• Network traffic analysis and packet capture tools

Tools & Platforms

• FortiManager / FortiAnalyzer (preferred)
• SIEM tools (Splunk, QRadar, etc. – basic exposure)
• Monitoring tools (SolarWinds, PRTG, etc.)

Preferred Qualifications

• Fortinet Certifications (NSE4 / NSE5 / NSE6)
• CCNA / CCNP (Security or Routing & Switching)
• Exposure to multi-vendor firewall environments:
• Palo Alto
• Cisco ASA / Firepower
• Check Point

Soft Skills

• Strong analytical and troubleshooting skills
• Effective communication and stakeholder management
• Ability to work independently and under pressure
• Proactive approach to problem-solving