Role Summary
The L3 Security Engineer leads advanced-level troubleshooting, designs secure architectures, optimizes firewall/SD-WAN deployments, and handles critical security incidents. They provide leadership to L2 teams, develop automation, drive improvements in policies, and collaborate with SOC and architecture teams to maintain a robust security posture.

Key Responsibilities
FortiGate Firewall – Advanced Architecture & Troubleshooting
Architect enterprise FortiGate deployments:
Active/Active & Active/Passive HA
Advanced Routing (OSPF, BGP, ECMP)
Segmentation & Zero Trust Policy Models

Perform deep-dive troubleshooting on:
Asymmetric routing, session drops
Application control/IPS/AV issues
Performance degradation, CPU spikes
Design and optimize firewall policies using best practices: least privilege, object reuse, rule cleanup.
Conduct advanced traffic analysis using packet captures and flow tracing.
Lead firewall migration and large-scale rule redesign projects.

Fortinet SD-WAN – Design & Optimization




Architect SD-WAN infrastructure and application SLA strategies.
Optimize steering rules, performance SLAs, and WAN failover logic.
Troubleshoot complex SD-WAN issues:
Agile path selection failures
Link quality fluctuations
Overlay tunnel instability
Integrate SD-WAN with MPLS, DIA, 4G/5G circuits.

FortiClient SSL VPN – Advanced Support
Design SSL VPN architectures with dual-factor authentication, SAML/LDAP, AD integration.
Troubleshoot complex VPN issues:
Routing conflicts
Packet fragmentation
Split tunneling vs. full tunnel problems
EMS/Zero Trust posture integration
Conduct forensic analysis of compromised or suspicious VPN sessions.

FortiAnalyzer + FortiManager – Enterprise-Level Management
Architect centralized configuration management (ADOMs, workflows).
Automate deployments via scripts / APIs using FortiManager.
Design custom log and reporting dashboards for compliance and threat analytics.
Per

📌 Security Engineer Gurugram
🏢 Velocis Systems Private
📍 Gurugram