L3 Network Engineer

Job Summary

We are looking for Senior Network Security Engineer with experience in designing, implementing, and managing enterprise-scale network security infrastructures across on-premises, cloud, and hybrid environments.

Mandatory Skill-set

• Bachelor’s degree in IT/Computing or equivalent hands-on experience;
• Must have 10- 15 years of experience in to Network security infrastructure;
• Must have exposure to Firewalls (FortiGate Firewall, Cisco ASA, Check Point) VPNs, routing, switching, segmentation,IDS/IPS, WAF (e.g. F5 WAF) NAC systems;
• Strong knowledge of cloud security in AWS, Azure, or GCP (VPCs, Security Groups, NSGs);
• Automation: Basic scripting skills in Python and use of Ansible for security configuration;
• Expertise in enterprise firewalls (Cisco, Fortinet), Zero Trust Architecture (ZTA), and SASE;
• Experience in network segmentation (VLANs, VRFs) and micro-segmentation design;
• Familiar with SIEM tools such as Splunk or Microsoft Sentinel for security monitoring and analysis;
• Strong packet analysis and troubleshooting skills using Wireshark and tcpdump.

Desired Skill-set

• Relevant certifications preferred: Fortinet, RSA, Tenable, Trend Micro, F5;
• Strong credentials such as CCNP/CCIE Security, PCNSE, CISSP (preferred);
• NAC: Cisco ISE or similar Network Access Control systems;
• Experience in change management process and method.

Responsibilities

• Define and drive the enterprise network security strategy across on-premises, cloud, and hybrid environments;
• Lead L3/L4 incident response, root cause analysis, and remediation for critical network security issues;
• Design, deploy, and manage security infrastructure including NGFWs, IDS/IPS, VPNs, Load Balancers, and NAC solutions;
• Develop and enforce network security policies, standards, segmentation, and compliance controls;
• Architect secure cloud networking solutions across AWS and Azure, integrating cloud and on-premises environments;
• Develop, test, and maintain Disaster Recovery (DR) and Business Continuity (BCP) network security capabilities;
• Evaluate and implement emerging security technologies such as Zero Trust and SASE to enhance security posture;
• Produce high-quality HLD/LLD documentation and mentor engineering teams on security best practices and advanced troubleshooting;
• Serve as the highest escalation point for complex incidents, ensuring timely resolution within SLA commitments;
• Drive change management, operational excellence, automation initiatives, and continuous service improvement;
• Collaborate with cross-functional teams, stakeholders, and clients to deliver secure, scalable, and resilient network services.

Should you be interested in this career opportunity, please send in your updated resume to ***email_hidden*** at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website( https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639