L3 Netwrok Engineer

Expert knowledge of Fortinet, Palo Alto, Cisco ASA/Firepower, Aruba, Cisco Meraki.

- Solid knowledge and hands-on experience with routing protocols: BGP, OSPF, EIGRP,

RIP, and Static Routing.
- Deep understanding of switching fundamentals: STP, RSTP, MSTP, HSRP, VRRP,

EtherChannel, and VLANs.
- Hands-on experience with Layer 2 and Layer 3 switch troubleshooting, including Cisco and Aruba environments.
- Expertise in SD-WAN solutions (Fortinet SD-WAN, Cisco Viptela, or others), including design, implementation, and troubleshooting.
- Proficiency in configuring and troubleshooting IPSec, GRE, DMVPN, and SSL VPNs.
- Hands-on with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) policy configuration, troubleshooting, and integration with endpoint clients.
- Working knowledge of network architecture, segmentation, and routing designs across hybrid environments (On-prem, Azure, GCP).
- Familiarity with Cisco, Aruba, Juniper, etc. stacking technologies, switch chassis configurations, and redundancy.
- Strong skills in Wireshark or other protocol analyzers to capture and troubleshoot complex network issues.
- Proficiency in LAN/WAN connectivity issues, performance optimization, and bandwidth management.
- Experience in deploying and troubleshooting dual WAN, traffic shaping, QoS, and WAN optimization.

Sensitivity: Confidential

(C2)




- Experience with dynamic routing and failover configurations in both campus and data center environments.
- Expertise in managing firewall and VPN policies in hybrid cloud using Fortinet, Palo

Alto, and Cisco ASA firewalls.
- Hands-on with firewall rule base auditing, NAT/policy design, VPN troubleshooting

(IPSec, SSL, DMVPN).
- Deep expertise in cloud-native security controls on GCP, Azure, and hybrid deployments.
- Strong skills in WAFs (Prophaze, Azure, Cloudflare), DDoS Mitigation, and load balancing.
- Understanding of PKI, certificate lifecycle management, and TLS configurations.
- Familiar with NAC systems (Aruba CPPM, Cisco ISE), 802.1x, posture assessments.
- Experience in Zero Trust Architecture, micro segmentation, and security baseline.
- Involved in security tool integrations (Zscaler, Defender for Endpoint, SIEM, Rapid7,

Qualys, CrowdStrike).
- Strong audit and compliance understanding: GDPR, SOX, RBI, ISO, PCI-DSS.
- Skilled with network forensics using Wireshark, PCAP, and NetFlow tools.

Certifications (Preferred)

Sensitivity: Confidential

(C2)
- Fortinet NSE 7/8, Palo Alto PCNSE, Cisco CCNP Security, AWS/GCP/Azure Security

Certifications.
- CISM, CISSP, CEH, or CRISC is a plus.Role & responsibilities

Preferred candidate profile

Perks and benefits

📌 Network Security Engineer For Gurrgaon Location (Gurugram)
🏢 STL Digital
📍 Gurugram