L2/L3 Network Security Engineer

You will be responsible for the following tasks as an L2/L3 Network Security Engineer with a specialization in Fortinet Firewalls: **Role Overview:** As an L2/L3 Network Security Engineer with expertise in Fortinet Firewalls, you will be responsible for the day-to-day administration, monitoring, troubleshooting, and design of network security solutions. You will work closely with the team to ensure the security infrastructure meets the organization's requirements. **Key Responsibilities:** **L2 Responsibilities:** - Perform day-to-day administration and monitoring of Fortinet Firewalls including FortiGate, FortiManager, and FortiAnalyzer. - Implement basic policy changes, NAT configurations, and VPN configurations. - Analyze and troubleshoot security incidents, escalating complex issues to L3. - Monitor logs and alerts using FortiAnalyzer/SIEM tools. - Ensure compliance with security standards and assist in audits. - Handle change requests and maintain documentation. **L3 Responsibilities:** - Design and architect Fortinet firewall solutions for enterprise environments. - Conduct advanced troubleshooting for complex network security incidents. - Configure and optimize high availability (HA), SD-WAN, IPS, Application Control, Web Filtering, and SSL Inspection. - Perform firmware upgrades, migrations, and integrate with cloud security solutions (FortiGate on AWS/Azure). - Conduct root cause analysis, prepare RCA reports, and drive automation using Python/Ansible. - Mentor L1/L2 teams, create SOPs, and ensure compliance with ISO 27001, PCI-DSS, NIST frameworks. **Qualification Required:** - Experience: - L2: Minimum 3-5 years in Network Security with hands-on Fortinet experience. - L3: Minimum 6-10 years with advanced troubleshooting and design expertise. - Certifications (Preferred): - NSE 4 (Fortinet Network Security Professional) - Mandatory for L2. - NSE 7 or NSE 8 - Preferred for L3. - Additional certifications such as ITIL and CISSP are optional. **Technical Skills Required:** - Fortinet Products: FortiGate, FortiManager, FortiAnalyzer, FortiAuthenticator. - VPN Technologies: IPSec, SSL. - Routing Protocols: BGP, OSPF. - Security Features: IPS, Web Filtering, Application Control, SD-WAN. - Automation: Python, Ansible (for L3). - Cloud Security: FortiGate on AWS/Azure/GCP. **Soft Skills:** - Strong analytical and troubleshooting skills. - Ability to work under pressure and handle escalations. - Excellent communication and documentation skills. Please note that the above responsibilities and qualifications are essential for the position of L2/L3 Network Security Engineer with a specialization in Fortinet Firewalls.,