Senior Network Security Engineer

About the role

We are looking for a Senior Network Security Engineer (Edge Defense) to join the Network Security Product area supporting a global enterprise environment. In this role, you will be responsible for designing, implementing, and optimizing perimeter and cloud security solutions, with a strong focus on Next-Generation Firewalls, Zero Trust Network Access, DDoS protection, and security automation. You will help shape the evolution of network security capabilities across hybrid and multi-cloud infrastructures while ensuring resilience against emerging cyber threats.

Your responsibilities

• Lead the deployment, configuration, and maintenance of Palo Alto and/or Fortinet NGFW environments with high-availability architectures.
• Design and implement Zero Trust Network Access (ZTNA) solutions and support the transition from traditional VPNs.
• Engineer and manage network security controls across AWS, Azure, and GCP environments.
• Develop and optimize DDoS mitigation strategies and advanced threat prevention capabilities.
• Drive the full lifecycle of Edge Security solutions, from design and implementation to global rollout and continuous improvement.
• Act as a technical SME for complex network security incidents, troubleshooting and root cause analysis.
• Build monitoring, telemetry, and observability solutions to improve visibility into network security operations.
• Automate security infrastructure and policy management using Infrastructure as Code and orchestration tools.
• Develop APIs and self-service solutions that enable secure consumption of network security services.
• Participate in an on-call rotation supporting critical global security services.

Must have

• Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related field.
• 5+ years of hands-on experience managing enterprise firewall environments.
• Strong expertise with Palo Alto and/or Fortinet Next-Generation Firewalls.
• Experience with SSL/TLS inspection, IPS/IDS, URL filtering, threat prevention, WildFire, GlobalProtect, and user identification technologies.
• Practical experience implementing network security controls in at least two major cloud providers: AWS, Azure, or GCP.
• Strong understanding of hybrid and multi-cloud networking concepts, including VPCs, VNETs, and Transit Gateways.
• Experience with security automation using Ansible, Terraform, Python, or similar tools.
• Knowledge of Zero Trust architectures, SASE frameworks, and modern remote access solutions.
• Strong troubleshooting, packet analysis, and network security investigation skills.
• Excellent communication skills and ability to collaborate across global teams.

Nice to have

• Experience with DDoS mitigation platforms such as Akamai, Cloudflare, or F5.
• Knowledge of Zscaler, Prisma Access, or other cloud-delivered security platforms.
• Experience in highly regulated industries such as Healthcare, Pharmaceuticals, or Financial Services.
• Familiarity with large-scale environments supporting thousands of diverse device types, including IoT and medical devices.
• Experience with Edge Computing and SASE architecture initiatives.
• Relevant industry certifications: PCNSE, NSE, CCNP Security, CISSP, CCSP, etc.

What we offer

• Stable employment and long-term cooperation.
• Attractive salary and benefits package.
• Flexible working model (remote/hybrid/on-site depending on the project).
• Access to training platforms, certifications, and professional development opportunities.
• Participation in international and innovative technology projects.
• Friendly work environment focused on knowledge sharing and collaboration.
• Private healthcare and additional employee benefits.
• Opportunity to work with modern technologies and experienced specialists.

Recruitment process

• Initial HR screening.
• Client interview (if applicable).
• Final decision and offer presentation.
• Welcome aboard! 🚀