L3 Network Security Engineer

Location:

Role Overview

skilled and proactive L3 Network Security Engineer

designing, implementing, optimizing, and supporting

Key Responsibilities

Architectural Design & Implementation

• Lead the design, planning, and deployment of complex network security solutions (e.g., next-gen firewalls, SASE, Zero Trust frameworks, micro-segmentation).
• Evaluate and recommend new security technologies, tools, and best practices to enhance organizational security posture.
• Maintain network security architecture diagrams, standards, and documentation.
  

Advanced Troubleshooting & Incident Response

• Serve as SME for critical network security incidents, leading root cause analysis and complex problem resolution.
• Conduct forensic analysis of breaches and sophisticated attacks.
• Develop and refine incident response playbooks and procedures.
  

Security Policy & Governance

• Define, implement, and enforce network security policies, standards, and guidelines.
• Ensure compliance with ISO 27001, NIST, GDPR, and other relevant regulations.
• Lead security audits, assessments, and risk evaluations related to network infrastructure.
  

Vulnerability Management & Threat Intelligence

• Oversee vulnerability assessments, penetration testing, and drive remediation efforts.
• Identify and assess emerging threats and integrate threat intelligence into security operations.
  

Automation & Optimization

• Identify automation opportunities for security processes and implement solutions using Python, PowerShell, Ansible, etc.
• Optimize existing configurations for performance, efficiency, and enhanced security.
  

Mentorship & Leadership

• Provide technical leadership, guidance, and mentorship to L1 and L2 Network Security Engineers.
• Lead small to medium-sized security projects.
• Conduct knowledge transfer and internal training sessions.
  

Vendor Management

• Collaborate with security vendors for advanced support, product evaluations, and roadmap discussions.
  

Qualifications And Skills

• 10–15 years in network security engineering, with 2–3 years in a senior/lead role.
• Extensive hands-on experience with enterprise network security platforms (Palo Alto, Fortinet, Cisco, Check Point) including advanced features like URL filtering, WildFire, Threat Prevention, SD-WAN Security.
• Deep understanding of network protocols, routing, switching, and cloud networking (AWS, Azure, GCP security services).
• Proven experience with SIEM, SOAR, EDR, and security orchestration tools.
• Experience in security architecture reviews, threat modeling, and risk assessments.
• Strong scripting and automation skills (Python, PowerShell, Bash).
  

Technical Skills

• Expertise in network segmentation, micro-segmentation, and Zero Trust frameworks.
• Advanced knowledge of cryptography, VPN technologies (IPsec, SSL VPN), and authentication protocols (RADIUS, TACACS+).
• Proficiency in packet capture analysis and advanced network troubleshooting.
• Knowledge of container security, API security, and application security is a plus.
  

Soft Skills

• Exceptional analytical and problem-solving skills for complex, ambiguous challenges.
• Strong leadership, mentoring, and project management capabilities.
• Excellent written and verbal communication, including presentations to technical and non-technical audiences.
• Ability to manage multiple projects, prioritize tasks, and drive strategic initiatives.