Network Security Engineer L3

Job description:

As a Network and Firewall L3 Engineer, you will assist in monitoring, maintaining, optimizing, and performing advanced-level troubleshooting on network and firewall infrastructure, ensuring system stability and security. This role is ideal for someone looking to gain hands-on experience in network administration, firewall management, and advanced troubleshooting. The position requires onsite presence at both Data Centre (DC) and office locations.

Roles And Responsibilities:

• Carry out advanced-level configurations and troubleshooting on network switches, routers, and firewalls and networking technologies such as EVPN BGP, VXLAN, SSL VPN, IPSEC VPN, and BGP.
• Extend technical support to L1, L2, and clients over email, tickets, phone, and other communication channels.
• 24×7 availability.
• Provide response and resolutions to incidents, requests, changes, and problems as per SLA and, if required, escalate as per the escalation matrix.
• Handle escalations, severity incidents, and critical projects.
• Work on SIPs and assignments.
• Adhere to process and procedures.
• Manage and maintain availability and uptime of infrastructure.
• Prepare handover checklist, POA, shift reports, KEDB, SOPs, and documentation.
• Collaborate with other team members and other teams to provide resolutions.
• Ensure all tasks and work done are captured in ticketing systems and are updated accordingly.
• Ensure early resolution of issues to meet SLA. Experience handling escalations and providing L3-level support/RCA (Root Cause Analysis) for critical incidents.

Primary Skills (Must Have):

• Strong hands-on experience in configuring, managing, and troubleshooting firewalls (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point).
• In-depth knowledge of routing and switching concepts (OSPF, BGP, EIGRP, VLANs, STP).
• Strong hands-on experience with BGP (eBGP/iBGP, route reflectors, route policies, path attributes) in Data Centre environments.
• Working knowledge of VXLAN overlay networking (VTEPs, VNI mapping, underlay/overlay design) and EVPN as its control plane, including MAC/IP route advertisement and multi-tenancy.
• Understanding of Spine-Leaf Data Centre fabric architectures built on BGP EVPN VXLAN.
• Expertise in VPN technologies (Site-to-Site, IPSec, SSL VPN, Remote Access VPN).
• Experience with network security concepts — NAT, ACLs, IPS/IDS, DMZ architecture, Zone-Based Firewalls.
• Proficiency in troubleshooting network connectivity, latency, and performance issues at L3 level.
• Sound knowledge of network monitoring tools (SolarWinds, PRTG, Nagios, or similar).
• Hands-on knowledge of load balancers and proxy technologies.
• Familiarity with network documentation, change management, and incident/problem management processes (ITIL framework).
• Experience with DC (Data Centre) network operations, including uptime, redundancy, and failover mechanisms.
• Strong understanding of TCP/IP fundamentals, DNS, DHCP, and network protocols.

Preferred Skills:

• Basic understanding of SOC processes — incident detection, triage, and escalation.
• Familiarity with SIEM tools (Splunk, QRadar, ArcSight, or similar) for log monitoring and correlation.
• Exposure to threat intelligence and common attack vectors (DDoS, malware, phishing, lateral movement).
• Ability to correlate network/firewall logs with SOC alerts for effective incident response.
• Knowledge of vulnerability management and patching processes.
• Familiarity with cloud networking concepts (AWS/Azure VPC, VNet, cloud firewalls, hybrid connectivity).
• Awareness of compliance and audit standards (ISO 27001, PCI-DSS) as applicable to network/security infrastructure.
• Certifications such as CCNA/CCNP (Security or Enterprise), PCNSE, Fortinet NSE, or CompTIA Security+ are a plus.

Why This Role is a Unique Opportunity at Neysa:

This role offers the opportunity to work on complex, large-scale infrastructure systems that power AI-driven platforms. You will play a critical role in maintaining system reliability, handling high-impact incidents, and shaping operational excellence in a fast-growing AI ecosystem. You’ll gain deep exposure to enterprise infrastructure, automation practices, and next-generation AI workloads while contributing to a high-performance environment.

Team Culture and Inclusion:

• Work in a collaborative, high-impact, and fast-paced environment.
• Be part of a culture that values ownership, innovation, and continuous learning.
• Thrive in an inclusive workplace where diverse ideas and perspectives are encouraged.

Skills

Checkpoint, Firepower, Firewalls, Fortinet, Network, Palo Alto, Security