Job Posting: Senior L3 Network Security Engineer

Job Title: Senior L3 Network Security Engineer

Location: Bangalore

About the Role

We are looking for a highly skilled and experienced Senior L3 Network Security Engineer to join our Network Operations & Infrastructure team. This is a senior technical role responsible for serving as the highest level of escalation for complex network and security incidents, driving infrastructure modernization initiatives, and ensuring the stability, performance, and security of enterprise environments.

The ideal candidate will possess deep expertise in Palo Alto Networks, Aruba SD-WAN, Aruba Wireless & ClearPass NAC, and Cisco Enterprise Networking technologies , along with a strong background in troubleshooting, design, implementation, automation, and mentoring.

Key Responsibilities

L3 Incident Management & Technical Leadership

- Act as the final escalation point for critical P1/P2 network and security incidents.
- Perform advanced troubleshooting using packet captures, log analysis, and monitoring platforms.
- Conduct root cause analysis (RCA) and implement permanent corrective actions.
- Engage with vendor TAC teams (Palo Alto, Aruba/HPE, Cisco) for complex technical issues and upgrades.
- Lead major incident management and disaster recovery efforts.

Palo Alto Network Security
- Design and manage Palo Alto NGFW deployments and HA clusters.
- Administer Panorama for centralized firewall management.
- Configure and optimize:
- App-ID
- User-ID
- Threat Prevention
- URL Filtering
- WildFire
- SSL/TLS Decryption
- Manage GlobalProtect VPN solutions including SAML/MFA integration.




- Design and troubleshoot IPsec VPN connectivity.

Aruba Wireless & ClearPass NAC
- Design and support Aruba Wireless infrastructure including Mobility Controllers, Instant APs, and Aruba Central.
- Engineer enterprise NAC solutions using Aruba ClearPass Policy Manager.
- Implement:
- 802.1X Authentication (EAP-TLS/PEAP)
- MAC Authentication Bypass (MAB)
- Device Profiling
- Dynamic Role Assignment
- Posture Assessment (OnGuard)
- Manage PKI and certificate lifecycle processes.

Aruba SD-WAN Engineering
- Deploy and optimize Aruba EdgeConnect (Silver Peak) environments.
- Configure Business Intent Overlays (BIO).
- Implement Dynamic Path Steering and WAN optimization policies.
- Support Direct Internet Access (DIA) and Cloud Security integrations.
- Manage SD-WAN Orchestrator platforms.

Cisco Enterprise Switching & Routing
- Design and support Cisco Catalyst and Nexus environments.
- Configure and troubleshoot:
- BGP
- OSPF
- VRF-Lite
- VXLAN/EVPN
- VPC/VSS/StackWise Virtual
- MSTP/RPVST
- LACP
- QoS
- ACLs
- Support enterprise campus, data center, and hybrid cloud connectivity.

Documentation & Team Development
- Develop HLDs, LLDs, SOPs, implementation plans, and failover runbooks.
- Mentor L1 and L2 engineers through technical workshops and knowledge-sharing sessions.




- Drive process improvements and operational excellence initiatives.

Required Technical Skills

Network Security

- Palo Alto NGFW
- Panorama
- GlobalProtect VPN
- SSL Decryption
- Threat Prevention
- Zone-Based Security Policies
- High Availability Configurations

Aruba Technologies
- Aruba ClearPass Policy Manager (CPPM)
- Aruba Central
- Aruba Mobility Controllers
- Aruba Wireless (AOS 8.x / AOS 10.x)
- Aruba EdgeConnect / Silver Peak SD-WAN

Cisco Networking
- Cisco Catalyst 9300/9400/9500
- Cisco Nexus 5K/7K/9K
- BGP, OSPF
- Layer 2 & Layer 3 Networking
- VRF, VXLAN/EVPN
- QoS, ACLs, Port Security

Core Networking
- TCP/IP
- DNS/DHCP (Infoblox)
- IPsec/GRE
- SNMPv3
- NetFlow/IPFIX
- Syslog
- NTP
- BFD

Required Experience
- 7 to 10+ years of hands-on experience in Enterprise Network & Security Engineering.
- Minimum 3+ years working as an L3 Engineer or equivalent senior technical role.
- Extensive experience supporting multi-vendor environments involving Palo Alto, Aruba, and Cisco technologies.
- Experience in high-availability enterprise environments, incident management, and disaster recovery planning.
- Robust troubleshooting and root cause analysis skills.

Preferred Certifications

Palo Alto

- PCNSE (Palo Alto Networks Certified Network Security Engineer)
- PCDRA

Aruba
- ACCP (Aruba Certified ClearPass Professional)
- ACCX (Aruba Certified ClearPass Expert)
- ACMP (Aruba Certified Mobility Professional)
- ACMX (Aruba Certified Mobility Expert)

Cisco
- CCNP Enterprise
- CCNP Security
- CCIE Enterprise Infrastructure
- CCIE Security

📌 Senior Network Security Engineer (Bengaluru)
🏢 Lorven Technologies
📍 Bengaluru