L3 Network Security Engineer

One Month Contract position

Contract will be extended based on requirement.

Experience : 8+ years

Key Responsibilities:

• Review and validate HLD, LLD, network architecture and security designs.
• Provide technical leadership for enterprise LAN, WAN, WLAN, SD-WAN and network securityimplementations.
• Design and validate FortiGate firewall, HA, SD-WAN, VPN, NAT and security policies.
• Provide architecture and implementation guidance for enterprise switching and wireless infrastructure.
• Design and validate VLAN, IP addressing, routing, segmentation and access-control architecture.
• Guide implementation of static routing, BGP, OSPF and other routing protocols as applicable.
• Design and validate WAN redundancy, ISP failover and SD-WAN path selection.
• Provide guidance for IPsec VPN and inter-site connectivity.
• Ensure appropriate network segmentation and security controls between users, servers, guest, IoT, management and other network segments.
• Review and guide AAA, RADIUS/TACACS+, DNS, DHCP, NTP, SNMP and Syslog integration.
• Ensure integration with NMS, monitoring, logging and configuration-backup platforms.
• Provide technical guidance for high availability, redundancy and disaster-recovery connectivity.
• Review configuration templates and provide implementation guidance to network engineers.
• Lead troubleshooting of complex network, firewall, routing, SD-WAN and connectivity issues.
• Conduct technical reviews during Day-0, Day-1 and Day-2 implementation activities.
• Define and review implementation plans, MOPs, test plans and rollback procedures.
• Lead technical validation and UAT/acceptance testing.
• Validate failover, redundancy, connectivity, segmentation and security-policy functionality.
• Review post-implementation configurations against approved design.
• Ensure as-built documentation and configuration records are complete and accurate.
• Conduct knowledge transfer to NOC/operations and implementation teams.
• Provide technical recommendations, risk identification and remediation plans throughout the project lifecycle.

Technical Skills

• FortiGate / FortiOS
• FortiGate HA and SD-WAN
• IPsec VPN
• Firewall policies and NAT
• Enterprise LAN/WAN architecture
• Aruba/Cisco switching
• Enterprise WLAN
• VLAN and network segmentation
• BGP / OSPF / Static Routing
• ISP/WAN technologies
• Network monitoring and management
• SNMP / Syslog
• RADIUS / TACACS+
• DNS / DHCP / NTP
• High Availability and DR
• Network security architecture
• Network troubleshooting
• Network documentation and technical governance

Experience & Qualifications

• 8+ years of experience in enterprise networking and network security.
• Strong experience in Network Security Architecture and implementation.
• Hands-on experience with FortiGate and enterprise networking technologies.
• Experience working on large-scale, multi-site or greenfield infrastructure projects.
• Strong understanding of network security, routing, switching, SD-WAN and WLAN.
• Experience leading or guiding implementation engineers.
• Strong troubleshooting and analytical skills.
• Ability to review technical designs and make independent architecture decisions.
• Good understanding of change management, implementation methodology and operational handover.
• Strong communication, documentation and stakeholder-management skills.

Key Deliverables

• Architecture and design review
• Network/security implementation guidance
• Configuration templates and technical standards
• Firewall and SD-WAN design validation
• Implementation/MOP review
• Test plan and acceptance validation
• HA/failover validation
• Troubleshooting and technical issue resolution
• As-built documentation
• Operational runbooks
• Knowledge-transfer sessions
• Final technical handover