L3 Network Security Engineer – Cisco ASA / Fortinet / CCNP

Location: Electronic City, Bangalore

Work Mode: Work From Office – 5 Days a Week

Experience: 10–15 Years

Employment Type: Full-Time

Budget: ₹10–15 LPA

Candidate Location: Bangalore candidates preferred

Interview Requirement: First round will be Face-to-Face (F2F) at Electronic City, Bangalore

Position Overview

We are looking for an experienced L3 Network Security Engineer with 10–15 years of strong hands-on experience in enterprise network security, firewall administration and Routing & Switching.

The ideal candidate should have strong expertise in Cisco ASA and Fortinet/FortiGate firewalls , along with advanced knowledge of Cisco Routers, Switches, LAN/WAN, VPN, NAT, ACL, OSPF, BGP, STP, HSRP and VRRP .

The candidate will be responsible for L3 troubleshooting, network security implementation, firewall configuration, migration, upgrades, incident resolution and customer-facing technical support across enterprise environments.

Key Responsibilities

- Act as an L3 escalation engineer for complex network security and enterprise networking issues.
- Design, configure, implement and troubleshoot Cisco ASA and Fortinet/FortiGate firewalls .
- Configure and manage firewall policies, ACLs, NAT, VPN, IPSec/SSL VPN and security rules .
- Manage firewall High Availability (HA) configurations and troubleshoot failover-related issues.
- Design, implement and support enterprise LAN/WAN network infrastructure .
- Configure and troubleshoot Cisco Routers and Switches .
- Handle advanced Routing & Switching issues involving OSPF, BGP, STP, HSRP and VRRP .
- Perform advanced troubleshooting of network connectivity, routing, firewall and security incidents.
- Analyze packet captures, logs and network traffic to identify and resolve complex issues.
- Perform firewall and network device firmware upgrades, patching, configuration backup and restoration .
- Support network migrations, technology upgrades and infrastructure implementation projects.




- Provide L3 support during critical incidents and planned maintenance windows.
- Work with customers and internal/global teams to understand requirements and provide technical solutions.
- Coordinate with OEM/vendor support teams for complex hardware, software and security issues.
- Prepare HLD/LLD documents, implementation plans, network diagrams, SOPs and troubleshooting documents .
- Participate in Change Management, Incident Management and Problem Management processes.
- Mentor L1/L2 network engineers and provide technical guidance on complex issues.
- Ensure adherence to network security standards, operational procedures and customer SLAs.

Mandatory Technical Skills

Network Security / Firewalls

- 10+ years of Network Security / Network Engineering experience
- Strong hands-on experience with Cisco ASA Firewall
- Strong hands-on experience with Fortinet / FortiGate Firewall
- Firewall policy configuration and troubleshooting
- ACL, NAT and security policies
- IPSec VPN / SSL VPN
- Firewall High Availability / Failover
- Firewall migration and upgrade experience
- Strong troubleshooting of complex firewall and connectivity issues

Routing & Switching Solid hands-on experience with:

- Cisco Routers
- Cisco Switches
- OSPF
- BGP
- VLAN
- STP
- HSRP
- VRRP
- LAN/WAN technologies
- TCP/IP
- Inter-VLAN routing
- Routing protocols and troubleshooting

L3 Troubleshooting

- Advanced network troubleshooting and root-cause analysis
- Packet capture and traffic analysis
- Network connectivity troubleshooting
- Routing and firewall path analysis
- Log analysis
- Incident and problem management
- Ability to independently resolve complex L3 network issues





Good to Have

- CCNP certification – Preferred, not mandatory
- Cisco Nexus Switches
- Cisco ACI
- FortiManager
- FortiAnalyzer
- Cisco Firepower / FTD
- Palo Alto Firewall
- SD-WAN
- Cloud Networking – AWS / Azure
- ITIL / ITSM process knowledge
- Network monitoring tools
- Network automation knowledge

Leadership & Customer-Facing Responsibilities Since this is an L3 Engineer position, the candidate should be capable of:

- Independently handling complex technical escalations.
- Taking ownership of critical incidents from troubleshooting through resolution.
- Interacting directly with customers and technical stakeholders.
- Leading network implementation and migration activities.
- Providing technical guidance to L1/L2 engineers.
- Conducting knowledge-sharing and technical mentoring sessions.
- Preparing RCA and preventive-action reports.
- Working with global teams across different time zones.
- Taking ownership of technical deliverables and project timelines.

Candidate Profile

- 10–15 years of relevant experience in Network Engineering / Network Security.
- Strong hands-on expertise in Cisco ASA + Fortinet/FortiGate is mandatory.
- Strong enterprise Routing & Switching experience.
- Strong L3 troubleshooting and problem-solving capabilities.
- Good communication and customer-facing skills.
- Experience working in enterprise/global network environments.
- Ability to work independently with minimal supervision.
- Bachelor's degree in Computer Science, IT, Electronics, or a related discipline preferred.
- Candidates must be available for a Face-to-Face first-round interview at Electronic City, Bangalore.

Important Hiring Criteria We are specifically looking for senior hands-on L3 engineers , not purely monitoring or L1/L2 support profiles.

Candidates should have demonstrated experience in:

Cisco ASA + FortiGate + Cisco Routing & Switching + L3 Troubleshooting + VPN + NAT + ACL + OSPF/BGP + Enterprise LAN/WAN

📌 Network Security Engineer (Bengaluru)
🏢 Vtricks Technologies
📍 Bengaluru