Network Security Engineer

Role: Network Security Consultant (L3)
Location: US Onsite (Client Location- Dearborn, Michigan)

Expectation from Stakeholders

• Share relevant profiles with hands-on L3 experience in the above technologies
• Candidates should be comfortable with client-facing roles and onsite engagement
• Preference for immediate joiners or short notice period

Role Summary

We are looking for a highly skilled professional responsible for designing, implementing, troubleshooting, and optimizing enterprise network security solutions. The role requires deep expertise in firewalls, secure access technologies, proxy/security platforms, and incident management, supporting critical client infrastructure.

Key Technical Requirements

Network Security & Firewall Platforms

• Cisco ASA (CSM), Cisco FTD (FMC)
• Palo Alto Firewalls (Strata Cloud Manager)
• Prisma Access
• Zscaler (ZIA & ZPA)
• Cisco Umbrella & WSA Proxy

VPN & Secure Access

• GlobalProtect VPN
• IPSEC / SSL VPN

Proxy & Security Technologies

• URL filtering, SSL/TLS decryption
• Proxy bypass, PAC file management
• DNS security (Umbrella)
• O365 and cloud proxy integrations

Network Infrastructure

• Routing: BGP, OSPF
• Switching: VLANs, STP, EtherChannel
• Devices: Cisco ASR/ISR Routers, Nexus 9K

Core Responsibilities

• Provide L3 support and act as SME for network security technologies
• Manage and troubleshoot firewalls, VPN, proxy, and cloud security platforms
• Handle P1/P2 incidents, RCA, and problem management
• Execute changes aligned with ITIL processes
• Manage and optimize Cisco WSA (proxy) including:
• URL filtering, access control, HTTPS decryption
• Malware protection and policy configuration
• Perform firmware upgrades, patches, and maintenance activities
• Analyze logs, packet captures, and security alerts
• Collaborate with SOC, TAC, and cross-functional teams
• Maintain documentation, SOPs, and configurations
• Participate in client calls and technical discussions

Preferred Skills

• Certifications such as CCNP Security, PCNSE, Zscaler certifications
• Exposure to email security (ESA) is an added advantage
• Experience with automation/optimization initiatives