L3 Support Engineer; Cisco WSA : Dearborn, MI Onsite

Duration:
Contract

Role: L3 Support Engineer (Cisco WSA)

Location:

Dearborn, MI – Day 1 Onsite

Cisco ASA Firewall, Proxy, Zscaler, Cisco Router, Palo Alto, Prisma, WSA Proxy, Routing, Switching, IDS, IPS, Cisco Web Proxy.

FTD Firewall, Starta Cloud Manager, F5, OSPF, BGV & Switching.

• Lead Level‑3 troubleshooting of network and security incidents across a global enterprise environment.
• Manage, configure, and optimize firewalls, VPN solutions, secure web gateways, and network security platforms.
• Oversee complex changes, migrations, and upgrades while ensuring minimal service impact.
• Provide SME‑level support for routing, switching, wireless, load balancing, and security infrastructure.

• Contribute to the design and deployment of scalable network architectures.
• Evaluate new technologies and recommend platform improvements.
• Work closely with peers and cross‑functional teams to maintain a secure and resilient network environment.

• Create and maintain high‑quality technical documentation, network diagrams, SOPs, and RCA reports.
• Ensure compliance with security best practices, operational standards, and enterprise policies.

• Security & VPN Technologies:
  • Cisco ASA (advanced configuration, troubleshooting, migration)
  • Palo Alto Firewalls (policy design, NAT, security profiles, Panorama)
  • Cisco Any Connect VPN
  • Palo Alto Global Protect
  • Zscaler Internet Access (ZIA) / ZPA
  • IPS Platforms (Cisco / Palo Alto / other enterprise IPS)
  • Cisco Web Proxy
  • Palo Alto Prisma Access
  • IPsec & GRE Tunnels (build, troubleshoot, optimize)
• Routing, Switching & Core Networking:
  • Proficiency in OSPF and BGP (enterprise routing, traffic engineering)
  • Catalyst Switches: 3850 / 9300 series (MPN switches), 9400 series (MDF – Standalone & Stackwise Virtual)
  • Cisco ASR Routers

• Software‑Defined & Datacenter Networking:
  • Cisco ACI (fabric operations, policy design)
  • Cisco SD‑WAN (cEdge)
• Wireless & Management Platforms:
  • Cisco Wireless LAN Controllers (5508, 5520, 9800)
  • Cisco Catalyst Center (formerly DNAC)
  • Cisco Identity Services Engine (ISE)
• Load Balancers & DNS Platforms:
  • F5 Load Balancers (LTM, GTM, iRules)
  • TCPWave DNS/DHCP/IPAM

• Strong analytical and diagnostic skills with the ability to resolve complex issues under pressure.
• Excellent communication skills; ability to interface with senior stakeholders and cross‑functional engineering teams.
• Experience managing large‑scale enterprise networks with global users.
• Ability to work independently with minimal oversight while handling critical escalations.

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or related field (preferred).
• Relevant certifications preferred:
  • CCNP / CCIE (R&S, Security)
  • PCNSE (Palo Alto)
  • F5 Certifications
  • Zscaler ZIA/ZPA Certifications