Senior Network Security Engineer & Architect

Quick Facts

• Senior technical role in network security (not a team-lead position)
• Works across enterprise and/or ISP environments

Description

You will design and implement network security solutions such as firewalls, segmentation, and perimeter protection. The role also includes DDoS architecture and deployment, forensics of network traffic using NetFlow and Deep Packet Inspection, and security consulting for customers and internal teams. You will help shape the technical strategy of the security department, mentor junior engineers, and support presales through technical presentations and Proof of Concept projects.

Responsibilities

• Design and implement network security solutions (firewalls, segmentation, perimeter protection)
• Architect and deploy DDoS protection and mitigation solutions
• Conduct network traffic forensic analysis (NetFlow, Deep Packet Inspection)
• Define technical standards and technology/process direction for the team
• Provide cyber security consulting (security architecture design, risk assessment, recommendations)
• Participate in security assessments and advisory projects beyond implementation (e.g., security architecture reviews, hardening recommendations)
• Mentor and lead junior colleagues; share know-how across the team
• Support presales activities (technical presentations, PoCs)
• Provide technical training/support for enterprise and ISP clients
• Manage and configure network and security devices (switches, routers, WiFi, firewalls) from leading vendors
• Act as Solution Architect for infrastructure protection projects

Requirements

• Experience in network security engineering
• Hands-on experience with Cisco, Fortinet (and other relevant technologies)
• Experience with network traffic analysis (NetFlow and/or DPI)
• Experience with presales and technical customer communication (PoCs, solution presentations)
• Ability to independently design and implement complex security architectures
• Natural authority and willingness to influence technical direction while operating as a consultant
• Experience with enterprise and/or ISP customers is an advantage
• Security certifications (e.g., PCNSE, CCNP Security, CISSP) are an advantage
• Linux knowledge is an advantage
• Communicative Czech and English
• Driver’s license group B

Benefits

• Flexible working hours and the option to work from home
• Cafeteria contribution up to 14,000 CZK/year
• Meal allowance
• Multisport card with a company contribution
• Preferential mobile plan
• Interest-free employee loan
• Refreshments at the workplace
• Annual and anniversary bonuses