Network Security Engineer L3

Saint Fox Consultancy Private Limited

Bengaluru, Pune District

On-site

INR 1,800,000 - 2,600,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Bonus structures
Onsite work

Job summary

Saint Fox Consultancy Private Limited is seeking an experienced Network Security Engineer to design, deploy, and manage Cisco ASA/FTD and Palo Alto NGFWs across enterprise environments. The role involves centralised policy management via Panorama, rule-base reviews, and incident response for L3 escalations.

You will configure campus networks with Catalyst/Nexus switches, WLCs and access points, while maintaining diagrams, run books, and change records. Onsite client engagement is expected.

Qualifications

  • 8 to 15 years hands-on experience in network security engineering.
  • Experience with Cisco ASA and/or FTD firewalls in production environments.
  • Experience with Palo Alto Networks NGFW and Panorama in enterprise settings.
  • Solid experience with Cisco Catalyst/Nexus switching in large networks.
  • Experience with Cisco WLC and enterprise access point management.

Responsibilities

  • Design, deploy, and manage Cisco ASA/FTD firewalls across enterprise and multi-site environments.
  • Manage Palo Alto NGFW and Panorama for centralized policy and device management across multiple firewalls.
  • Perform rule-base reviews, clean-up, and optimisation to reduce attack surface and policy drift.
  • Respond to and resolve L3 firewall incidents within SLA windows.
  • Configure and manage Cisco Catalyst/Nexus switching, VLANs, STP, QoS, and WLC/AP management.
  • Maintain network diagrams, run books, and configuration documentation; support audits.
  • Mentor and guide L1/L2 engineers and participate in vulnerability/patch cycles.

Skills

Network security engineering
Cisco ASA/FTD
Palo Alto NGFW
Palo Alto Panorama
Cisco Catalyst/Nexus
Cisco WLC/AP management
VPN/IPsec/SSL-VPN
Wireshark
802.1X/NAC/RADIUS

Tools

Wireshark
NAC 802.1X
RADIUS

Job description

Key Responsibilities
Firewall Operations
  • Design, deploy, and manage Cisco ASA and Firepower Threat Defense (FTD) firewalls in enterprise and multi-site environments.
  • Operate and tune Palo Alto Networks next-generation firewalls including policy management, App-ID, User-ID, and threat prevention profiles.
  • Manage Palo Alto Panorama for centralised policy and device management across multiple firewalls.
  • Perform rule-base reviews, clean-up, and optimisation on a scheduled basis to reduce attack surface and policy drift.
  • Respond to and resolve L3 firewall incidents and escalations within agreed SLA windows.
Network Infrastructure
  • Configure and manage Cisco Catalyst and Nexus switching platforms including VLANs, STP, VPC, and QoS.
  • Administer Cisco Wireless infrastructure including WLC (Wireless LAN Controllers) and Cisco Access Points across campus and branch environments.
  • Troubleshoot complex Layer 2 and Layer 3 network issues from physical through to application layer.
  • Maintain and enforce network segmentation policies aligned to Zero Trust principles. Routing and Connectivity
  • Configure and manage dynamic routing protocols including OSPF, BGP, and EIGRP.
  • Manage site-to-site and remote-access VPN including Cisco AnyConnect and Palo Alto Global Protect.
  • Support SD-WAN and SASE integration efforts where applicable. Operations and Governance
  • Own change management for network security changes including planning, testing, and rollback procedures.
  • Maintain accurate and current network diagrams, run books, and configuration documentation.
  • Participate in vulnerability and patch management cycles for network devices.
  • Support internal and external audits by providing evidence and configuration reviews.
  • Provide mentoring and technical guidance to L1 and L2 engineers.
Required Skills & Experience
Experience
  • 8 to 15 years of hands-on experience in network security engineering. At least 4 years working at L3 or equivalent senior engineer level.
  • Demonstrated production experience with Cisco ASA and/or FTD firewalls.
  • Demonstrated production experience with Palo Alto Networks NGFW and Panorama.
  • Solid experience with Cisco Catalyst and Nexus switching in enterprise environments.
  • Working experience with Cisco WLC and enterprise access point management.
Technical Skills
  • Cisco Firewall: ACLs, NAT, VPN, HA, and Firepower management centre. Cisco Switching: VLAN, STP, RSTP, VPC/vPC, port-channel, QoS, and SPAN.
  • Cisco Wireless: WLC management, AP provisioning, SSID design, RF planning basics, and client troubleshooting.
  • Palo Alto: Security policies, NAT, decryption, URL filtering, Wildfire, Panorama, and HA configuration.
  • Routing: OSPF, BGP, EIGRP, PBR, and route redistribution.
  • VPN: IPsec, SSL-VPN, GlobalProtect, and AnyConnect.
  • Packet analysis using Wireshark or equivalent.
  • Working knowledge of NAC, 802.1X, and RADIUS.
Preferred Certifications
  • Required: CCNP Security or CCNP Enterprise (current and valid).
  • Preferred: Palo Alto PCNSE (or working towards it).
  • Preferred: Cisco CCIE Security or equivalent advanced certification.
Soft Skills
  • Clear communicator. You can explain a complex network problem to a nontechnical stakeholder without burying them in acronyms.
  • Methodical under pressure. You follow process during incidents and document what happened afterward.
  • Self-directed. You manage your workload, flag blockers early, and do not wait to be chased.
  • Collaborative. You work well with security analysts, project managers, and client technical teams.
Why Join St. Fox
  • Opportunity to work onsite at a leading customer location, enabling direct engagement with innovative projects.
  • A collaborative and dynamic working environment focused on continuous learning and professional growth.
  • Exposure to advanced technologies and ongoing training opportunities.
  • Clear career progression pathways supported by experienced leadership.
What We Offer
  • An opportunity to work in a rapidly growing company with potential for personal and professional growth.
  • Opportunity to work in a rapidly growing company with potential for personal and professional growth.
  • A collaborative and inclusive culture that values each employees contribution towards our goals.
  • Competitive compensation package including attractive bonus structures and benefits

St. Fox is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

L3 Network Security Engineer (Managed Firewall | Network Infrastructure)
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)

Saint Fox Consultancy Private Limited • Pune District

On-site
INR 900,000 - 1,500,000
Onsite client location
Competitive compensation
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)

Saint Fox Consultancy (P) Ltd. • Bengaluru

On-site
INR 4,000,000 - 7,000,000
Onsite at client location
Professional growth
Training opportunities
+1
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)

Saint Fox Consultancy Private Limited • Bengaluru

On-site
INR 7,143,000 - 9,048,000
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)

Saint Fox • Bengaluru

On-site
INR 1,800,000 - 3,800,000
Competitive salary and benefits
Growth opportunities
Exposure to cutting-edge technologies
+1
Network Security Engineer II
Network Security Engineer II

Rackspace Technology • Gurugram District

On-site
INR 1,200,000 - 1,800,000
Network Security Engineer L1
Network Security Engineer L1

St. Fox • Dadri

On-site
INR 480,000 - 720,000
Competitive salary and benefits package
Opportunities for professional growth
Exposure to cutting-edge technologies
+1
Network Security Engineer L2
Network Security Engineer L2

Saint Fox Consultancy Private Limited • Dadri

On-site
INR 1,200,000 - 2,200,000
SME-NETWORKING
SME-NETWORKING

SHI Solutions India Pvt. Ltd. • Hyderabad

On-site
INR 1,800,000 - 2,600,000
Network and Security Engineer
Network and Security Engineer

Cigres Technologies Private Limited • Bengaluru

On-site
INR 800,000 - 1,200,000
Sr. Engineer-Network & Security Services
Sr. Engineer-Network & Security Services

The Search House • Dadri

On-site
INR 600,000 - 1,000,000