Network Security Engineer

Your responsibilities

Edge Architecture & Engineering

Perimeter Defense Mastery

• Lead the end-to-end deployment, configuration, and maintenance of Next-Generation Firewalls (Palo Alto, Fortinet), ensuring high availability (Active/Active & Active/Passive) and optimal inspection performance across global entry points.

Zero Trust Transition

• Architect and implement ZTNA solutions to move beyond legacy VPNs, focusing on granular, application-level access and identity-aware security policies.

Multi-Cloud Network Security

• Engineer and manage cloud-native security controls within AWS, Azure, and GCP, ensuring consistent security posture across hybrid and multi-cloud environments.

DDoS & Threat Mitigation

• Design and refine DDoS protection strategies and automated threat prevention policies (SSL decryption, IPS/IDS) to shield critical infrastructure from sophisticated external attacks.

Product Lifecycle & Evolution

Lifecycle Governance

• Oversee the delivery of Edge solutions from initial design through build, global rollout, and continuous optimization, ensuring that all security controls are reliable, scalable, and documented.

Edge Innovation

• Proactively identify emerging trends in Edge computing and SASE (Secure Access Service Edge) to inform the product roadmap and maintain a competitive advantage in network defense.

Operational Excellence & Visibility

Technical Subject Matter Expertise

• Serve as the lead engineer for complex network security escalations, performing deep-packet analysis and root-cause investigations to implement long-term architectural fixes.

Security Observability

• Develop advanced monitoring dashboards and telemetry to provide real-time visibility into edge traffic patterns, attack surfaces, and the health of the security stack.

Automation & Orchestration

• Manage security policies as code while continuously improving automation workflows and cross-platform orchestration to eliminate manual friction, reduce operational overhead, and ensure consistent, high-speed security enforcement.

Self-Service & Enablement

We are looking for you, if you have

Education / Experience

• Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related technical field.
• 5+ years of hands-on experience in designing and managing enterprise-grade Firewall environments, specifically Palo Alto and/or Fortinet.
• Proven track record of implementing network security controls in at least two major cloud providers: AWS, Azure, or GCP.
• Proven track record in configuring and maintaining Palo Alto Next-Generation Firewalls (NGFW), including TLS inspection, User identification, WildFire, Threat Prevention, URL Filtering, and GlobalProtect.
• Proven experience using Ansible, Terraform, or Python to manage network security infrastructure at scale.
• Experience managing security controls in complex, global environments involving thousands of diverse device profiles, including IoT, Medical, and Corporate.
• Experience working in highly regulated environments, such as Pharmaceuticals, Healthcare, or Finance, is a significant plus.

Technical Skills

• Expert-level knowledge of Palo Alto and/or Fortinet platforms, including advanced threat prevention, SSL decryption, and high-availability design.
• Experience managing specialized DDoS protection services, such as Akamai, Cloudflare, or F5.
• Proficiency in modern Zero Trust architectures and SASE frameworks, such as Zscaler and Prisma Access.
• Strong understanding of cloud networking components: VPCs, VNETs, Transit Gateways, and Cloud Firewalls.
• Deep understanding of core protocols: BGP, OSPF, DNS, and TLS/SSL, and how they intersect with security enforcement.

Skills considered a plus

• Fortinet NSE, Palo Alto Networks PCNSA, PCNSE, or Cisco CCNP Security certifications.
• CISSP certification.
• Proficiency in Terraform and GitHub to maintain version-controlled, reproducible security configurations.
• Strong Python or Go skills to build custom API integrations between security platforms and internal orchestration tools.
• Experience managing specialized DDoS protection services, such as Akamai, Cloudflare, or F5.
• Familiarity with NIST, ISO 27001, and FAIR data principles.

Leadership Skills

• Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders.
• Passion for researching emerging network security trends and automated enforcement techniques.
• Ability to navigate global complexity and translate high-level security requirements into functional network policies.
• Proven ability to manage technical workstreams from concept to production with minimal supervision and full ownership of the Edge Defense product lifecycle.

Additional Qualifications

• Ability to mentor less experienced colleagues and provide guidance on cybersecurity best practices and analysis techniques.
• Strong facilitation, communication, and conflict-resolution skills to ensure alignment across multiple product squads and stakeholder networks.
• Demonstrated interpersonal, collaborative, and operational-excellence skills.

We offer

• Participation in interesting and demanding projects.
• Flexible working hours.
• A great, non-corporate atmosphere.
• Possibility to work remotely or in a hybrid model, with 2 days per week from the office.
• Opportunities for development and promotion.
• Attractive package of benefits.

We reserve the right to contact the selected candidates.