Job Posting: Senior L3 Network Security Engineer
Job Title: Senior L3 Network Security Engineer
Location: Bangalore

About the Role
We are looking for a highly skilled and experienced Senior L3 Network Security Engineer to join our Network Operations & Infrastructure team. This is a senior technical role responsible for serving as the highest level of escalation for complex network and security incidents, driving infrastructure modernization initiatives, and ensuring the stability, performance, and security of enterprise environments.
The ideal candidate will possess deep expertise in Palo Alto Networks, Aruba SD-WAN, Aruba Wireless & ClearPass NAC, and Cisco Enterprise Networking technologies , along with a strong background in troubleshooting, design, implementation, automation, and mentoring.
Key Responsibilities
L3 Incident Management & Technical Leadership
Act as the final escalation point for critical P1/P2 network and security incidents.
Perform advanced troubleshooting using packet captures, log analysis, and monitoring platforms.
Conduct root cause analysis (RCA) and implement permanent corrective actions.
Engage with vendor TAC teams (Palo Alto, Aruba/HPE, Cisco) for complex technical issues and upgrades.
Lead major incident management and disaster recovery efforts.
Palo Alto Network Security
Design and manage Palo Alto NGFW deployments and HA clusters.
Administer Panorama for centralized firewall management.
Configure and optimize:
App-ID
User-ID
Threat Prevention
URL Filtering
WildFire
SSL/TLS Decryption
Manage GlobalProtect VPN solutions including SAML/MFA integration.




Design and troubleshoot IPsec VPN connectivity.
Aruba Wireless & ClearPass NAC
Design and support Aruba Wireless infrastructure including Mobility Controllers, Instant APs, and Aruba Central.
Engineer enterprise NAC solutions using Aruba ClearPass Policy Manager.
Implement:
802.1X Authentication (EAP-TLS/PEAP)
MAC Authentication Bypass (MAB)
Device Profiling
Dynamic Role Assignment
Posture Assessment (OnGuard)
Manage PKI and certificate lifecycle processes.
Aruba SD-WAN Engineering
Deploy and optimize Aruba EdgeConnect (Silver Peak) environments.
Configure Business Intent Overlays (BIO).
Implement Dynamic Path Steering and WAN optimization policies.
Support Direct Internet Access (DIA) and Cloud Security integrations.
Manage SD-WAN Orchestrator platforms.
Cisco Enterprise Switching & Routing
Design and support Cisco Catalyst and Nexus environments.
Configure and troubleshoot:
BGP
OSPF
VRF-Lite
VXLAN/EVPN
VPC/VSS/StackWise Virtual
MSTP/RPVST
LACP
QoS
ACLs
Support enterprise campus, data center, and hybrid cloud connectivity.
Documentation & Team Development
Develop HLDs, LLDs, SOPs, implementation plans, and failover runbooks.
Mentor L1 and L2 engineers through technical workshops and knowledge-sharing sessions.




Drive process improvements and operational excellence initiatives.
Required Technical Skills
Network Security
Palo Alto NGFW
Panorama
GlobalProtect VPN
SSL Decryption
Threat Prevention
Zone-Based Security Policies
High Availability Configurations
Aruba Technologies
Aruba ClearPass Policy Manager (CPPM)
Aruba Central
Aruba Mobility Controllers
Aruba Wireless (AOS 8.x / AOS 10.x)
Aruba EdgeConnect / Silver Peak SD-WAN
Cisco Networking
Cisco Catalyst 9300/9400/9500
Cisco Nexus 5K/7K/9K
BGP, OSPF
Layer 2 & Layer 3 Networking
VRF, VXLAN/EVPN
QoS, ACLs, Port Security
Core Networking
TCP/IP
DNS/DHCP (Infoblox)
IPsec/GRE
SNMPv3
NetFlow/IPFIX
Syslog
NTP
BFD
Required Experience
7 to 10+ years of hands-on experience in Enterprise Network & Security Engineering.
Minimum 3+ years working as an L3 Engineer or equivalent senior technical role.
Extensive experience supporting multi-vendor environments involving Palo Alto, Aruba, and Cisco technologies.
Experience in high-availability enterprise environments, incident management, and disaster recovery planning.
Robust troubleshooting and root cause analysis skills.
Preferred Certifications
Palo Alto
PCNSE (Palo Alto Networks Certified Network Security Engineer)
PCDRA
Aruba
ACCP (Aruba Certified ClearPass Professional)
ACCX (Aruba Certified ClearPass Expert)
ACMP (Aruba Certified Mobility Professional)
ACMX (Aruba Certified Mobility Expert)
Cisco
CCNP Enterprise
CCNP Security
CCIE Enterprise Infrastructure
CCIE Security

📌 Senior Network Security Engineer (Bengaluru)
🏢 Lorven Technologies
📍 Bengaluru