L3 Netwrok Engineer:

Expert knowledge of Fortinet, Palo Alto, Cisco ASA/Firepower, Aruba, Cisco Meraki.
• Strong knowledge and hands-on experience with routing protocols: BGP, OSPF, EIGRP,
RIP, and Static Routing.
• Deep understanding of switching fundamentals: STP, RSTP, MSTP, HSRP, VRRP,
EtherChannel, and VLANs.
• Hands-on experience with Layer 2 and Layer 3 switch troubleshooting, including Cisco
and Aruba environments.
• Expertise in SD-WAN solutions (Fortinet SD-WAN, Cisco Viptela, or others), including
design, implementation, and troubleshooting.
• Proficiency in configuring and troubleshooting IPSec, GRE, DMVPN, and SSL VPNs.
• Hands-on with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) policy
configuration, troubleshooting, and integration with endpoint clients.
• Working knowledge of network architecture, segmentation, and routing designs across
hybrid environments (On-prem, Azure, GCP).
• Familiarity with Cisco, Aruba, Juniper, etc. stacking technologies, switch chassis
configurations, and redundancy.
• Strong skills in Wireshark or other protocol analyzers to capture and troubleshoot
complex network issues.
• Proficiency in LAN/WAN connectivity issues, performance optimization, and bandwidth
management.
• Experience in deploying and troubleshooting dual WAN, traffic shaping, QoS, and WAN
optimization.

Sensitivity: Confidential
(C2)





• Experience with dynamic routing and failover configurations in both campus and data
center environments.
• Expertise in managing firewall and VPN policies in hybrid cloud using Fortinet, Palo
Alto, and Cisco ASA firewalls.
• Hands-on with firewall rule base auditing, NAT/policy design, VPN troubleshooting
(IPSec, SSL, DMVPN).
• Deep expertise in cloud-native security controls on GCP, Azure, and hybrid
deployments.
• Strong skills in WAFs (Prophaze, Azure, Cloudflare), DDoS Mitigation, and load
balancing.
• Understanding of PKI, certificate lifecycle management, and TLS configurations.
• Familiar with NAC systems (Aruba CPPM, Cisco ISE), 802.1x, posture assessments.
• Experience in Zero Trust Architecture, micro segmentation, and security baseline.
• Involved in security tool integrations (Zscaler, Defender for Endpoint, SIEM, Rapid7,
Qualys, CrowdStrike).
• Strong audit and compliance understanding: GDPR, SOX, RBI, ISO, PCI-DSS.
• Skilled with network forensics using Wireshark, PCAP, and NetFlow tools.

Certifications (Preferred)

Sensitivity: Confidential
(C2)

• Fortinet NSE 7/8, Palo Alto PCNSE, Cisco CCNP Security, AWS/GCP/Azure Security
Certifications.
• CISM, CISSP, CEH, or CRISC is a plus.Role & responsibilities

Preferred candidate profile

Perks and perks

📌 Network Security Engineer For Gurrgaon Location (Noida)
🏢 STL Digital
📍 Noida