L3 Support Engineer (Cisco WSA) : Dearborn, MI : W2 Only

Job Description

Job Description

Role - L3 Support Engineer (Cisco WSA)

Location – Dearborn, MI – Day 1 Onsite

Duration : Contract

Note: Primary- Cisco ASA Firewall , Proxy, Zscaler, Cisco Router, Palo Alto, Prisma, WSA Proxy, Routing, Switching, IDS, IPS, Cisco Web Proxy.

Secondary - FTD Firewall, Starta Cloud Manager, F5 ,OSPF, BGV & Switching.

Job Description – L3 Support Engineer (Cisco WSA)

Key Responsibilities

Network & Security Operations

• Lead Level‑3 troubleshooting of network and security incidents across a global enterprise environment.
• Manage, configure, and optimize firewalls, VPN solutions, secure web gateways, and network security platforms.
• Oversee complex changes, migrations, and upgrades while ensuring minimal service impact.
• Provide SME‑level support for routing, switching, wireless, load balancing, and security infrastructure.

Engineering & Architecture

• Contribute to the design and deployment of scalable network architectures.
• Evaluate new technologies and recommend platform improvements.
• Work closely with peers and cross‑functional teams to maintain a secure and resilient network environment.

Governance & Documentation

• Create and maintain high‑quality technical documentation, network diagrams, SOPs, and RCA reports.
• Ensure compliance with security best practices, operational standards, and enterprise policies.

Mandatory Technical Skills

Security & VPN Technologies

• Cisco ASA (advanced configuration, troubleshooting, migration)
• Palo Alto Firewalls (policy design, NAT, security profiles, Panorama)
• Cisco AnyConnect VPN
• Palo Alto GlobalProtect
• Zscaler Internet Access (ZIA) / ZPA
• IPS Platforms (Cisco / Palo Alto / other enterprise IPS)
• Cisco Web Proxy
• Palo Alto Prisma Access
• IPsec & GRE Tunnels (build, troubleshoot, optimize)

Routing, Switching & Core Networking

• Proficiency in OSPF and BGP (enterprise routing, traffic engineering)
• Catalyst Switches:
  • 3850 / 9300 series (MPN switches)
  • 9400 series (MDF – Standalone & Stackwise Virtual)
• Cisco ASR Routers

Desirable Technical Skills

Software‑Defined & Datacenter Networking

• Cisco ACI (fabric operations, policy design)
• Cisco SD‑WAN (cEdge)

Wireless & Management Platforms

• Cisco Wireless LAN Controllers (5508, 5520, 9800)
• Cisco Catalyst Center (formerly DNAC)
• Cisco Identity Services Engine (ISE)

Load Balancers & DNS Platforms

• F5 Load Balancers (LTM, GTM, iRules)
• TCPWave DNS/DHCP/IPAM

Professional Skills

• Strong analytical and diagnostic skills with the ability to resolve complex issues under pressure.
• Excellent communication skills; ability to interface with senior stakeholders and cross‑functional engineering teams.
• Experience managing large‑scale enterprise networks with global users.
• Ability to work independently with minimal oversight while handling critical escalations.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or related field (preferred).
• Relevant certifications preferred:
  • CCNP / CCIE (R&S, Security)
  • PCNSE (Palo Alto)
  • F5 Certifications
  • Zscaler ZIA/ZPA Certifications