Saint Fox Consultancy Private Limited
Jobs
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)
L3 Network Security Engineer (Managed Firewall | Network Infrastructure)
Be an Early Applicant
The Role
Designs, deploys, operates, and troubleshoots enterprise Cisco and Palo Alto firewall, switching, wireless, routing, VPN, SD-WAN, and SASE infrastructure. Responsibilities include incident escalation, rule-base optimization, network segmentation, change management, vulnerability and patch cycles, audit support, documentation, and mentoring junior engineers. The role requires extensive L3 network security experience and ownership of managed firewall environments.
Summary Generated by Built In
About the Role:
Saint Fox is looking for an experienced L3 Network Security
Engineer to own the design, deployment, and day-to-day management of
enterprise network security infrastructure for our clients. This is a senior
hands-on role. You will work across Cisco and Palo Alto environments, drive
incident escalations to closure, mentor junior engineers, and contribute to
architecture decisions.
You will sit within the Managed Firewall and Secure Access practice, working
closely with Security Analysts and Principal Engineers to keep client
environments stable, documented, and audit-ready.
Key Responsibilities:
Firewall Operations
• Design, deploy, and manage Cisco ASA and Firepower Threat Defense (FTD)
firewalls in enterprise and multi-site environments.
• Operate and tune Palo Alto Networks next-generation firewalls including
policy management, App-ID, User-ID, and threat prevention profiles.
• Manage Palo Alto Panorama for centralised policy and device management
across multiple firewalls.
• Perform rule-base reviews, clean-up, and optimisation on a scheduled basis
to reduce attack surface and policy drift.
• Respond to and resolve L3 firewall incidents and escalations within agreed
SLA windows.
Network Infrastructure
• Configure and manage Cisco Catalyst and Nexus switching platforms
including VLANs, STP, VPC, and QoS.
• Administer Cisco Wireless infrastructure including WLC (Wireless LAN
Controllers) and Cisco Access Points across campus and branch
environments.
• Troubleshoot complex Layer 2 and Layer 3 network issues from physical
through to application layer.
• Maintain and enforce network segmentation policies aligned to Zero Trust
principles.
Routing and Connectivity
• Configure and manage dynamic routing protocols including OSPF, BGP, and
EIGRP.
• Manage site-to-site and remote-access VPN including Cisco AnyConnect and
Palo Alto Global Protect.
• Support SD-WAN and SASE integration efforts where applicable
Operations and Governance
• Own change management for network security changes including planning,
testing, and rollback procedures.
• Maintain accurate and current network diagrams, run books, and
configuration documentation.
• Participate in vulnerability and patch management cycles for network
devices.
• Support internal and external audits by providing evidence and configuration
reviews.
• Provide mentoring and technical guidance to L1 and L2 engineers
Requirements
Experience
• 8 to 15 years of hands-on experience in network security engineering.
• At least 4 years working at L3 or equivalent senior engineer level.
• Demonstrated production experience with Cisco ASA and/or FTD firewalls.
• Demonstrated production experience with Palo Alto Networks NGFW and
Panorama.
• Solid experience with Cisco Catalyst and Nexus switching in enterprise
environments.
• Working experience with Cisco WLC and enterprise access point
management.
Technical Skills
• Cisco Firewall: ACLs, NAT, VPN, HA, and Firepower management centre.
• Cisco Switching: VLAN, STP, RSTP, VPC/vPC, port-channel, QoS, and SPAN.
• Cisco Wireless: WLC management, AP provisioning, SSID design, RF planning
basics, and client troubleshooting.
• Palo Alto: Security policies, NAT, decryption, URL filtering, Wildfire, Panorama,
and HA configuration.
• Routing: OSPF, BGP, EIGRP, PBR, and route redistribution.
• VPN: IPsec, SSL-VPN, GlobalProtect, and AnyConnect.
• Packet analysis using Wireshark or equivalent.
• Working knowledge of NAC, 802.1X, and RADIUS.
Preferred Certifications:
• Required: CCNP Security or CCNP Enterprise (current and valid).
• Preferred: Palo Alto PCNSE (or working towards it).
• Preferred: Cisco CCIE Security or equivalent advanced certification.
Soft Skills:
• Clear communicator. You can explain a complex network problem to a non-technical stakeholder without burying them in acronyms.
• Methodical under pressure. You follow process during incidents and
document what happened after ward.
• Self-directed. You manage your workload, flag blockers early, and do not wait
to be chased.
• Collaborative. You work well with security analysts, project managers, and
client technical teams
Benefits
Why Join St. Fox:
• Opportunity to work onsite at a leading customer location, enabling direct
engagement with innovative projects.
• A collaborative and dynamic working environment focused on continuous
learning and professional growth.
• Exposure to advanced technologies and ongoing training opportunities.
• Clear career progression pathways supported by experienced leadership.
What We Offer:
• An opportunity to work in a rapidly growing company with potential for
personal and professional growth.
• Opportunity to work in a rapidly growing company with potential for
personal and professional growth.
• A collaborative and inclusive culture that values each employee’s
contribution towards our goals.
• Competitive compensation package including attractive bonus structures
and benefits
How to Apply: Interested candidates should submit a detailed resume and a
cover letter outlining their qualifications and experience relevant to the role
applied for. Applications should be sent via our careers portal or to [email protected]
St. Fox is an Equal Opportunity Employer. We celebrate diversity and are
committed to creating an inclusive environment for all employees.
Skills Required
- 8 to 15 years of hands-on experience in network security engineering
- At least 4 years working at L3 or equivalent senior engineer level
- Production experience with Cisco ASA and/or Firepower Threat Defense firewalls
- Production experience with Palo Alto Networks next-generation firewalls and Panorama
- Experience with Cisco Catalyst and Nexus switching in enterprise environments
- Experience with Cisco WLC and enterprise access point management
- Current and valid CCNP Security or CCNP Enterprise certification
- Palo Alto PCNSE certification or actively working toward it
- Cisco CCIE Security or equivalent advanced certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Saint Fox Consultancy Private Limited is an IT services company serving enterprise customers with technology, SaaS, cloud, and cybersecurity solutions. It helps organizations address business needs through consultative sales, product demonstrations, strategic technology planning, and complex solution engagements. The company focuses on building enterprise relationships and delivering solutions that improve security, technology performance, and business value.
