LAN Security Engineer L3

Payroll : Client on-roll

Location: Gurugram

Shift: 24*7 (Rotational)

Work mode: Work from office (5 Days working environment)

Budget: 25-30 LPA

Job Summary:

Key Responsibilities:

• Firewall Security (PALO ALTO)

o Design, deploy, and manage Palo Alto Firewalls (physical and virtual appliances).

o Manage and monitor Palo Alto Firewalls including security policies, threat prevention, and URL filtering.

o Maintain and optimize firewall rulesets to ensure both security and network performance.

o Maintain and manage Panorama for centralized firewall administration.

o Monitor logs and alerts, investigate incidents, and troubleshoot firewall-related issues.

o Plan and execute firmware upgrades, high-availability (HA) setups, and DR testing.

• Switching Management (CISCO)

o Configure, manage, and troubleshoot enterprise switching infrastructure (Cisco Catalyst 2700/3000/4000/9000 series).

o Implement VLANs, STP, VTP, EtherChannel, HSRP/VRRP/GLBP, QoS, ACLs.

o Handle advanced L3 routing on switches (OSPF, EIGRP, BGP).

o Perform network segmentation, redundancy, and high-availability design.

o Support escalations and root cause analysis for complex network issues.

• WIRELESS-WLC & DNAC (CISCO)

o Configure, manage, and troubleshoot Cisco Wireless LAN Controllers (WLC) and APs.

o Design and implement enterprise WLAN solutions with high availability.

o Handle advanced features: RF optimization, mobility, FlexConnect, QoS, and security.

o Hands-on with Cisco WLC (5500/9800 series), Prime or DNAC.

o Cisco DNAC: Automation workflows, network assurance, inventory management.

o Integrate WLC with ISE, DNAC, Firewalls, and wired infrastructure.

o Perform root cause analysis for wireless performance, roaming, and authentication issues.

o Support escalations and drive wireless infrastructure improvements.

• Security Compliance & Incident Response

o Closure of vulnerability and security audits in sync with security Team.

o Respond to and investigate network security incidents.

o Ensure compliance with security frameworks and regulatory requirements.

• Collaboration & Documentation

o Work closely with infrastructure, security, and application teams to deliver secure network solutions.

o Create and maintain technical documentation, network diagrams, and standard operating procedures.

Technical Expertise in:

• Palo Alto Firewalls: Security profiles, NAT, VPNs, Panorama management.

• Strong understanding of Networking protocols (TCP/IP, BGP, OSPF, EIGRP, VLANs, STP)

• Identity & Access Management

• Minimum 10-15 years of enterprise network on 7+ years of hands-on experience in enterprise network security and managing team.

• Relevant certifications preferred:

• Cisco:

o CCNA, CCNP Wireless/Enterprise, CWNA

o Palo Alto: PCNSA, PCNSE

• Excellent troubleshooting and problem-solving skills.

• Strong written and verbal communication abilities.

Preferred Qualifications:

• Bachelor's Degree in Computer Science, IT, or equivalent field.

• Should have knowledge of Network automation (Python, Ansible).

• Experience in handling large Enterprise Network

--

Kirti Rustagi

kirti.rustagi@raspl.com