- Network Security L2 Engineer
- - A Level 2 (L2) Network Security Engineer will be responsible for the design, deployment, implementation, configuration, and troubleshooting of enterprise network security infrastructure. The candidate should have robust networking experience and hands-on project experience with Palo Alto, Panorama, FortiGate,SASE and Check Point technologies.
- Key Responsibilities
- Implement network security solutions based on project requirements and security standards.
- Lead the deployment and implementation of Palo Alto firewalls, including initial configuration, security policies, NAT, routing, VPN, and HA.
- Perform Palo Alto Panorama deployment and configuration, including device onboarding, templates, device groups, policies, and centralized management.
- Design and implement FortiGate firewall solutions, including policies, NAT, routing, VPN, HA, and security profiles.
- Perform firewall migration, replacement, and upgrade projects with proper planning, implementation, and rollback procedures.
- Implement High Availability (HA) and clustered firewall environments, including HA design, configuration, testing, and failover validation.
- Design and implement IPsec Site-to-Site VPN and remote-access VPN solutions.
- Configure and implement firewall routing, NAT, PAT, DNAT, and required network connectivity.
- Perform firewall policy migration and rule-base optimization during firewall replacement or migration projects.
- Troubleshoot complex network security issues involving routing, NAT, VPN, security policies, and application connectivity.
- Participate in end-to-end security implementation projects, including requirement gathering, design, implementation, testing, documentation, and handover.
- Coordinate with network, server, application, SOC,



and other infrastructure teams during implementation and migration activities.
- Prepare and maintain technical documentation, network diagrams, implementation plans, MOPs, rollback plans, and as-built documents.
- Required Technical Skills
- Palo Alto & Panorama
- Strong hands-on experience in Palo Alto firewall deployment and implementation.
- Experience with Panorama deployment and centralized firewall management.
- Experience with Templates, Device Groups, Security Policies, NAT, routing, VPN, and HA.
- Experience in firewall migration, upgrades, and implementation projects.
- FortiGate
- Hands-on experience in FortiGate firewall deployment and implementation.
- Experience with security policies, NAT, routing, IPsec VPN, SSL VPN, HA, and security profiles.
- Hands-on experience with FortiManager for centralized FortiGate management.
- Experience with FortiAnalyzer for logging, reporting, monitoring, and analysis.
- Knowledge of FortiToken and its integration for authentication/MFA requirements.
- Experience in FortiGate migration and upgrade projects.
- Check Point
- Hands-on experience with Check Point firewall operations and configuration.
- Knowledge of Security Policies, NAT, VPN, routing, and HA.
- Check Point experience in troubleshooting, administration, and change implementation.
- Networking
- Strong understanding of TCP/IP, OSI, VLAN, subnetting, routing, switching, DNS,



DHCP, and network troubleshooting.
- Good understanding of static routing and dynamic routing protocols such as OSPF/BGP.
- Strong understanding of IPsec VPN, NAT/PAT/DNAT, and network segmentation.
- Project Implementation Capabilities
- The candidate should be capable of independently handling or leading activities such as:
- New Palo Alto, Panorama, and FortiGate firewall deployment and commissioning.
- Firewall migration and replacement projects.
- Firewall HA implementation and failover testing.
- Palo Alto and Panorama implementation.
- FortiGate implementation with FortiManager and FortiAnalyzer integration.
- Firewall policy migration and optimization.
- IPsec VPN implementation and migration.
- Routing and NAT design and implementation.
- Firewall upgrades and technology refresh projects.
- Troubleshooting during implementation and post-implementation validation.
- Preparing implementation plans, MOPs, rollback plans, test cases, and as-built documentation.
- Qualifications
- Bachelor's degree in Computer Science, Information Technology, Networking, or a related field.
- Relevant certifications such as PCNSE/PCNSA, Fortinet certifications, Check Point certifications, CCNA/CCNP, or equivalent are preferred.
- Strong hands-on experience in enterprise network security implementation projects.
- Soft Skills
- Strong analytical and problem-solving skills.
- Good project coordination and communication skills.
- Ability to independently handle implementation activities.
- Ability to coordinate with multiple technical teams and stakeholders.
- Strong documentation and change-management skills.
- Ability to work under pressure and meet project deadlines.

📌 ENGINEER TECHNICAL SUPPORT (Mumbai)
🏢 Network Techlab India
📍 Mumbai