L3 Network Security Engineer

About This Job

TECEZE

Location: Chennai, Tamil Nadu, India

Work Mode: On-site

Industry: IT Services and IT Consulting

Job Description

One Month Contract position

Contract will be extended based on requirement.

Experience : 8+ years

Key Responsibilities

Review and validate HLD, LLD, network architecture and security designs.Provide technical leadership for enterprise LAN, WAN, WLAN, SD-WAN and network securityimplementations.Design and validate FortiGate firewall, HA, SD-WAN, VPN, NAT and security policies.Provide architecture and implementation guidance for enterprise switching and wireless infrastructure.Design and validate VLAN, IP addressing, routing, segmentation and access-control architecture.Guide implementation of static routing, BGP, OSPF and other routing protocols as applicable.Design and validate WAN redundancy, ISP failover and SD-WAN path selection.Provide guidance for IPsec VPN and inter-site connectivity.Ensure appropriate network segmentation and security controls between users, servers, guest, IoT, management and other network segments.Review and guide AAA, RADIUS/TACACS+, DNS, DHCP, NTP, SNMP and Syslog integration.Ensure integration with NMS, monitoring, logging and configuration-backup platforms.Provide technical guidance for high availability, redundancy and disaster-recovery connectivity.Review configuration templates and provide implementation guidance to network engineers.Lead troubleshooting of complex network, firewall, routing, SD-WAN and connectivity issues.Conduct technical reviews during Day-0, Day-1 and Day-2 implementation activities.Define and review implementation plans, MOPs, test plans and rollback procedures.Lead technical validation and UAT/acceptance testing.Validate failover, redundancy, connectivity, segmentation and security-policy functionality.Review post-implementation configurations against approved design.Ensure as-built documentation and configuration records are complete and accurate.Conduct knowledge transfer to NOC/operations and implementation teams.Provide technical recommendations, risk identification and remediation plans throughout the project lifecycle.

Technical Skills

FortiGate / FortiOSFortiGate HA and SD-WANIPsec VPNFirewall policies and NATEnterprise LAN/WAN architectureAruba/Cisco switchingEnterprise WLANVLAN and network segmentationBGP / OSPF / Static RoutingISP/WAN technologiesNetwork monitoring and managementSNMP / SyslogRADIUS / TACACS+DNS / DHCP / NTPHigh Availability and DRNetwork security architectureNetwork troubleshootingNetwork documentation and technical governance

Experience & Qualifications

8+ years of experience in enterprise networking and network security.Strong experience in Network Security Architecture and implementation.Hands-on experience with FortiGate and enterprise networking technologies.Experience working on large-scale, multi-site or greenfield infrastructure projects.Strong understanding of network security, routing, switching, SD-WAN and WLAN.Experience leading or guiding implementation engineers.Strong troubleshooting and analytical skills.Ability to review technical designs and make independent architecture decisions.Good understanding of change management, implementation methodology and operational handover.Strong communication, documentation and stakeholder-management skills.

Key Deliverables

Architecture and design reviewNetwork/security implementation guidanceConfiguration templates and technical standardsFirewall and SD-WAN design validationImplementation/MOP reviewTest plan and acceptance validationHA/failover validationTroubleshooting and technical issue resolutionAs-built documentationOperational runbooksKnowledge-transfer sessionsFinal technical handover