L3 Network and Security Support Engineer

The L3 Network and Security Support Engineer is responsible for providing advanced-level technical support, troubleshooting, design validation, and implementation support for complex network and security infrastructures. The role involves handling escalated incidents, performing root-cause analysis (RCA), driving critical issue resolution, and mentoring L1/L2 teams. The engineer must possess strong expertise in routing, switching, firewalls, security platforms, and enterprise network technologies.

Key Responsibilities

1. Advanced Technical Support

• Handle L3-level escalations for network and security incidents.
• Troubleshoot complex issues in LAN, WAN, WLAN, SD-WAN, and security environments.
• Provide support for critical outages and act as a technical SME during major incidents.
• Perform root-cause analysis and provide permanent solutions.

2. Network Infrastructure Management

• Configure, maintain, and optimize Cisco/Aruba switches & routers.
• Manage VLANs, STP, OSPF, BGP, EIGRP, MPLS, VXLAN, and SDA/ACI environments.
• Review performance metrics and ensure network reliability and SLA adherence.

3. Security Infrastructure Management

• Manage firewall policies and configurations (Palo Alto, Fortinet, Cisco ASA/FTD, Check Point).
• Work on IDS/IPS, VPN, URL filtering, WAF, and endpoint security platforms.
• Monitor and troubleshoot AAA, 802.1X, ISE/ClearPass authentication issues.
• Ensure compliance with security standards and best practices.

4. Implementation & Deployment

• Lead complex network/security implementation and migration projects.
• Review network architecture diagrams, HLD/LLD, and change plans.
• Execute scheduled changes (change management – RFC, CAB approval).

5. Monitoring & Automation

• Utilize monitoring tools (SolarWinds, PRTG, Zabbix, Splunk, ManageEngine).
• Automate routine tasks using Python, Ansible, or shell scripting (optional but added advantage).

6. Documentation & Knowledge Sharing

• Maintain updated documentation (SOPs, network diagrams, knowledge base).
• Provide technical guidance, training, and mentorship for L1 & L2 teams.

Required Skills & Qualifications

Technical Skills

• Strong hands-on experience in Routing & Switching — Cisco, Aruba, Juniper.
• Expertise in firewalls & security platforms — Palo Alto / Fortinet / Cisco / Check Point.
• Strong knowledge of VPN, NAT, Syslog, AAA, ISE/Clear Pass.
• Experience with SD-WAN technologies (Cisco, Fortinet SD-WAN, etc.).
• Good understanding of Wi-Fi technologies — Aruba, Cisco WLC.
• Packet capture and analysis using Wireshark/TCPDump.
• knowledge of Cisco DNA Centre Configuration and maintaining

Soft Skills

• Strong communication and client-handling skills.
• Ability to work under pressure during critical outages.
• Excellent problem-solving and analytical thinking.

Education & Certifications

• Bachelor’s degree in Computer Science, Engineering, or related discipline.
• Certifications (any of the following preferred):
• CCNP / CCIE (Routing & Switching / Security)
• Palo Alto PCNS and Fortinet NSE4–NSE7

Experience Required

• 8+ years of hands-on experience in network and security operations.
• Experience in managing large enterprise networks is an added advantage.