L2 Operations Engineer - Network Security

Job Overview:

We are looking for an experienced L2 Operations Engineer - Network Security to maintain and troubleshoot enterprise firewalls, Secure Service Edge (SSE) platforms, ZTNA, and internet security gateways.

Key Responsibilities:

• Manage and resolve L2 network security incidents, rule/port requests, firewall health checks, and change approvals.
• Administer Palo Alto Firewalls (NGFW, Panorama, Prisma Access) and Zscaler (ZIA, ZPA) infrastructure.
• Perform policy evaluation, SSL inspection, URL filtering, and troubleshoot Private Access failures across application segments.
• Diagnose GRE/IPsec tunnel failures, DNS split-forwarding issues, and device posture failures.
• Troubleshoot SAML assertion, SCIM provisioning, and group synchronization with IdP platforms (Entra ID, Okta, Ping).
• Conduct packet captures (Wireshark, tcpdump) and log correlation across SIEM (Splunk), SSE platforms, and endpoints.
• Leverage ZDX and ADEM telemetry data to diagnose path, latency, and edge selection issues.
• Apply firewall patches/upgrades under strict change control and participate in outage/RCA calls.

Required Skills & Experience:

• 7 years of experience in Network Security L2 Operations.
• 7+ years of deep SME experience with Next-Gen Firewalls (Palo Alto), Secure Web Gateways (Zscaler), AWS/Azure multi-cloud security controls, and core TCP/IP routing.
• Practical knowledge of Infrastructure-as-Code (Ansible, Terraform, GitHub) and policy tuning tools (e.g., AlgoSec).
• Hands-on experience working in a 24x7 environment with ServiceNow ITSM workflows.
• Fluent written and spoken English.

Preferred Certifications:

• Palo Alto PCNSA / PCNSE
• Zscaler Certified Administrator
• Cisco CCNA / Proxy & SSE Industry Certifications