Network Consultant

Role OverviewThe Network Security L3 Engineer will be responsible for 24x7 Network Security Operations, providing expert-level support and ensuring the stability, performance, and security of mission-critical infrastructure. This is a hands-on technical role requiring deep expertise in firewalls, proxies, IDS/IPS, NAC, and advanced troubleshooting.Key ResponsibilitiesProvide Tier-3 operational support for Firewalls, Proxies, IDS/IPS, NAC to resolve critical business issues.Own and manage Security Infrastructure, suggesting design improvements and implementing changes.Ensure SLAs are met, perform performance analysis, proactive troubleshooting, and capacity planning.Execute change controls, update documentation, and maintain team portals.Participate in root cause analysis, capacity planning, and performance optimization.Automate operational tasks for efficiency and robustness.Monitor and analyze data to develop improvement plans for network security and application performance.Develop and maintain network security capacity plans and trending reports.Act as senior escalation point for critical incidents and vendor management.Provide leadership and technical oversight for 24x7 network security operations.Required QualificationsBachelor’s degree or equivalent.Certifications: PCNA, CCNP Security, CCDP, CCIE Security (mandatory).12+ years in Network/Telecom roles with expert-level experience in:Firewall Management (Palo Alto, Cisco Firepower)Proxy Management (Blue Coat, Symantec SWG, Zscaler)IDS/IPS Management (iXIA, Cisco)NAC Management (Aruba GNAC, Cisco NAC)SD-WAN, VPN, Routing & SwitchingStrong knowledge of Cisco/Juniper/Palo Alto technologies: HSRP/VRRP, VRF, VPC, LACP, FabricPath.Advanced understanding of Routing Protocols: BGP, OSPF, MPLS VPN, Multicast.Ability to perform TCP/IP packet captures and interpret results using Wireshark.Experience in vendor management, monitoring tools, and troubleshooting complex environments.Excellent communication skills, ability to lead and coordinate across global teams.Additional SkillsExperience with public or hybrid cloud (Azure, AWS, GCP, Oracle).Knowledge of cloud-native or third-party firewalls.Familiarity with Azure/AWS networking (NSG, UDR, VPC, VNET, Route53, etc.).Excited about this role? If you’re interested or know someone who would be a great fit, kindly share the profile to yasindu.jayakody@hcltech.com.