– Network & Security Engineer L2

Position: Network & Security Engineer – L2

Experience: 5 Years Overall | 3–4 Years Relevant

Location: BKC, Mumbai

Work Mode: Work from Office (WFO)

Shift: Rotational Shifts Applicable

Job Summary

We are looking for an experienced Network & Security Engineer – L2 with solid hands-on expertise in Palo Alto and Check Point Firewalls, along with enterprise networking technologies. The candidate will be responsible for L2 operations, troubleshooting, configuration, monitoring, incident resolution, and maintenance of network and security infrastructure in a 24x7 enterprise environment.

Key Responsibilities

- Provide L2 operational and technical support for enterprise network and security infrastructure.
- Configure, administer, monitor, and troubleshoot Palo Alto and Check Point Firewalls.
- Manage firewall security policies, NAT, objects, zones, routing, VPNs, and access-control rules.
- Troubleshoot IPsec/SSL VPN, site-to-site connectivity, remote-access connectivity, and firewall traffic issues.
- Perform firewall rule analysis, policy updates, rule cleanup, and periodic configuration reviews as per security standards.
- Troubleshoot enterprise LAN/WAN connectivity involving VLANs, trunking, routing, switching, and network interfaces.
- Hands-on experience with OSPF, BGP, static routing, VLAN, STP/RSTP, EtherChannel, HSRP/VRRP, TCP/IP, ARP, DNS, and DHCP.
- Monitor network and security devices using NMS/SIEM/monitoring tools, investigate alerts, and perform initial incident analysis.
- Troubleshoot network performance issues including packet loss, latency, routing problems, interface errors,



and connectivity failures.
- Work with Cisco/Aruba switches and routers, firewalls, wireless infrastructure, VPN, and other network security technologies.
- Perform configuration changes, firmware upgrades, backup/restore activities, and maintenance tasks according to approved change procedures.
- Analyze network traffic using Wireshark, TCPDump, firewall logs, and other troubleshooting tools.
- Handle security incidents related to firewall traffic, unauthorized access attempts, blocked applications, VPN failures, and policy violations.
- Coordinate with L3 teams, SOC/NOC, OEMs, ISPs, application, server, and cloud teams for complex incidents.
- Participate in incident, problem, and change management activities and ensure resolution within defined SLAs.
- Prepare and maintain network/security documentation, topology diagrams, configurations, SOPs, and RCA reports.
- Participate in 24x7 rotational shifts and support major incident/bridge calls when required.

Required Technical Skills

Primary Skills:

- Palo Alto Firewall
- Check Point Firewall
- Firewall Administration & Troubleshooting
- Network Security
- Enterprise LAN/WAN
- L2 Network Operations

Palo Alto:

- Security Policies
- NAT Policies
- Security Zones
- Address/Service Objects




- Application/Service-based policies
- Routing
- IPsec VPN
- SSL VPN / GlobalProtect
- Firewall monitoring and troubleshooting
- PAN-OS upgrades and configuration management

Check Point:

- Security Policy administration
- NAT
- Objects and Services
- VPN configuration/troubleshooting
- Firewall logs and monitoring
- Access Control Policy
- Basic SmartConsole administration
- Policy installation and troubleshooting

Networking:

- Cisco/Aruba Routing & Switching
- VLAN, Trunking, STP/RSTP
- OSPF, BGP and Static Routing
- HSRP/VRRP
- EtherChannel/LACP
- TCP/IP, ARP, DNS, DHCP
- IPv4/IPv6
- LAN/WAN troubleshooting
- Network monitoring and performance analysis

Additional Security Skills:

- ACLs and network segmentation
- IPsec VPN
- NAT/PAT
- IDS/IPS concepts
- Network security monitoring
- SIEM/log-management concepts
- Vulnerability and patch-management fundamentals
- Cloud networking/security concepts – AWS/Azure is an advantage

Experience & Qualifications

- 5 years of overall experience in Network/Network Security Engineering.
- 3–4 years of relevant hands-on experience with Palo Alto and Check Point Firewalls.
- Strong L2-level experience in firewall administration, network troubleshooting, incident management, and security operations.
- Experience working in 24x7 enterprise environments with rotational shifts.
- Strong troubleshooting, analytical, communication, documentation, and vendor-coordination skills.
- CCNA/CCNP, PCNSA/PCNSE, Check Point certifications or equivalent certifications will be an added advantage.

📌 Network security Engineer(Palo & Checkpoint) (Mumbai)
🏢 Talent Vision Services
📍 Mumbai