Network Security Engineer (L3)

Location: Lahore / Karachi / Islamabad Pakistan
Work Mode: Hybrid
Client: UAE-based Client
Experience: 5 Years
Employment Type: Full-Time

We are looking for an experienced L3 Network Security Engineer to support and manage enterprise network security environments for a UAE-based client. The role requires strong hands-on expertise in network security technologies advanced troubleshooting security architecture incident resolution and operational support.

The successful candidate will work on complex L3 security incidents security infrastructure administration network security design troubleshooting optimization and implementation of security solutions across enterprise environments.

• Provide L3 technical support for complex network security incidents escalations and service requests.
• Administer configure troubleshoot and optimize enterprise firewall and network security platforms.
• Work with Palo Alto FortiGate Check Point and other enterprise firewall technologies.
• Manage and troubleshoot F5 security and application delivery environments including WAF-related technologies.
• Support IPS/IDS and DDoS protection/mitigation activities.
• Manage enterprise proxy and secure internet access solutions including Zscaler/Forcepoint or equivalent technologies.
• Support MFA VPN token solutions Cisco ISE/NAC and remote access security environments.
• Design and review secure network architectures including HLD/LLD high availability redundancy segmentation and security controls.
• Perform firewall policy reviews rule implementation configuration changes migrations and security hardening.
• Troubleshoot complex VPN firewall authentication network security and connectivity issues.
• Support WAF and application security requirements.
• Work with endpoint security technologies including EDR DLP Trellix/McAfee or equivalent solutions.
• Support vulnerability assessment security posture improvement and remediation activities.
• Work with ITSM processes for incident problem change and service request management.
• Maintain technical documentation configuration records troubleshooting procedures and knowledge base articles.
• Coordinate with internal teams vendors and client stakeholders for incident resolution and security infrastructure changes.
• Participate in security projects technology upgrades migrations and implementation activities.
• Ensure security operations and changes follow established ITIL security compliance and change-management processes.
• Provide technical guidance to L1/L2 teams and support knowledge transfer where required.

• Enterprise Firewalls: Palo Alto FortiGate Check Point
• Proxy/Secure Web Gateway: Zscaler Forcepoint or equivalent
• F5 BIG-IP
• IPS/IDS and DDoS
• MFA and VPN Token Solutions
• Cisco ISE / NAC
• Network Security Architecture and HLD/LLD
• VPN: IPSec SSL VPN Site-to-Site and Remote Access VPN

• WAF
• IBM Guardium or equivalent database security technology
• Endpoint Security: Trellix/McAfee EDR DLP
• SIEM/Security Monitoring platforms
• Vulnerability Assessment tools
• ITSM platforms such as BMC Helix ServiceNow or equivalent

• 5 years of professional experience in Network Security Cybersecurity or Security Operations.
• Strong hands-on experience in L3-level network security support and troubleshooting.
• Proven experience working with enterprise firewall technologies and security infrastructure.
• Experience with security architecture network design HLD/LLD and high-availability environments.
• Strong understanding of TCP/IP routing switching VPN DNS network segmentation and security principles.
• Experience handling complex security incidents and escalations.
• Experience working in enterprise banking telecom government ISP or managed security environments is preferred.
• Strong communication and stakeholder-management skills.
• Ability to work with UAE-based client teams and support requirements aligned with UAE business hours when required.

Relevant certifications such as:

• Palo Alto PCNSE
• Fortinet NSE / FCP
• Check Point certifications
• Cisco CCNP Security
• ITIL Foundation
• Relevant cybersecurity or network security certifications

• Advanced troubleshooting and analytical skills
• Network security architecture and design
• Incident and problem resolution
• Security operations and infrastructure management
• Change and configuration management
• Documentation and technical reporting
• Client communication and stakeholder management
• Ability to work independently at L3 level
• Strong ownership of critical security incidents and escalations