Network Security Engineer

NETWORK SECURITY ENGINEER

Department: IT Infrastructure / Network & Security

Level: Intermediate / Mid-Level

Industry: Manufacturing

Experience: Minimum 2 years

Work Location: Cikande, Banten

A. JOB DESCRIPTION

Job Purpose

The Network Security Engineer is responsible for managing, implementing, monitoring, maintaining, and troubleshooting network and network security infrastructure to ensure the security, availability, reliability, and performance of IT infrastructure supporting business operations and manufacturing activities.

The role is also responsible for supporting and executing network and security projects, including planning, implementation, migration, testing, commissioning, documentation, and handover.

Key Responsibilities

1. Network Security Management

• Manage and configure Palo Alto Networks Firewall within an enterprise environment.

• Configure and maintain firewall security policies, NAT, security profiles, application control, URL filtering, VPN, routing, and security objects.

• Monitor firewall traffic, security logs, threat events, and network security incidents.

• Review and optimize firewall policies to improve security and network performance.

• Troubleshoot firewall, VPN, connectivity, and security-related issues.

• Support network segmentation between user, server, production, guest, and other network environments.

• Perform firewall configuration backup and support high-availability environments where applicable.

2. Network Infrastructure Management

• Manage and configure Aruba network infrastructure, particularly Aruba switches.

• Configure and troubleshoot VLANs, trunking, STP, LACP, routing, and network connectivity.

• Monitor network availability, performance, bandwidth utilization, and device health.

• Perform preventive maintenance and configuration backup for network devices.

• Ensure network infrastructure meets operational, security, and availability requirements.

3. Network & Security Project Implementation

• Participate in end-to-end network and security projects, from requirement gathering and planning through implementation, testing, commissioning, and handover.

• Perform network and security infrastructure deployment, migration, upgrade, and expansion.

• Conduct device installation, configuration, testing, troubleshooting, and commissioning.

• Prepare implementation plans, migration plans, test scenarios, rollback plans, and technical documentation.

• Coordinate with project teams, vendors, contractors, and internal stakeholders.

• Ensure project implementation is completed according to technical requirements, security standards, project timelines, and change management procedures.

4. Manufacturing & Production Environment Support

• Support network infrastructure used by manufacturing and production environments.

• Maintain network connectivity between office areas, servers/data centers, warehouses, production areas, and supporting facilities.

• Support network requirements for business applications and systems used within the manufacturing environment.

• Troubleshoot network issues that may impact production or business operations.

• Coordinate with IT, Engineering, Maintenance, Production, and external vendors to resolve technical issues.

• Apply proper change control and risk mitigation when performing changes within production environments.

5. Incident Management & Troubleshooting

• Respond to network and security incidents based on priority and SLA requirements.

• Perform root cause analysis for network and security issues.

• Analyze firewall logs, network logs, and packet captures to identify and resolve issues.

• Develop corrective and preventive actions to minimize recurring incidents.

• Escalate technical issues to vendors or technology principals when required.

• Provide technical support during critical network or production incidents.

6. Network Monitoring & Maintenance

• Monitor network devices, firewalls, VPN connections, network availability, bandwidth utilization, and security events.

• Perform regular preventive maintenance and health checks.

• Perform firmware and software upgrades according to change management procedures.

• Maintain network and security configuration backups.

• Support network recovery and troubleshooting activities when required.

7. Documentation & Reporting

• Maintain network topology diagrams and network security documentation.

• Maintain firewall configuration and network device documentation.

• Prepare project implementation, testing, maintenance, and handover documentation.

• Prepare incident and troubleshooting reports.

• Ensure all network and security changes are properly documented.

• Maintain accurate records of network configurations and infrastructure changes.

8. Vendor & Stakeholder Coordination

• Coordinate with vendors and technology principals for implementation, troubleshooting, maintenance, and technical support.

• Work closely with internal IT, Engineering, Production, Warehouse, and business stakeholders.

• Participate in technical discussions, project meetings, and infrastructure assessments.

• Support technical evaluation of new network and security technologies.

• Provide technical updates and project status to relevant stakeholders.

________________________________________

B. JOB SPECIFICATION

Education

• Minimum Diploma (D3) or Bachelor's Degree (S1) in Information Technology, Computer Science, Computer Engineering, Electrical Engineering, Information Systems, or a related field.

• Equivalent technical experience may be considered.

Professional Experience

• Minimum 2 years of experience in Network Engineering, Network Security, IT Infrastructure, or a related field.

• Hands-on experience with Palo Alto Networks Firewall.

• Hands-on experience with Aruba Networks / Aruba Switching.

• Experience supporting or implementing network and security projects.

• Previous experience in a manufacturing environment is preferred.

• Experience supporting enterprise or production environments is an advantage.

________________________________________

C. TECHNICAL SKILLS

Network Security

Strong understanding or hands-on experience with:

• Palo Alto Networks Firewall

• Security Policies

• NAT

• Security Profiles

• Application Control

• URL Filtering

• VPN

• Firewall Objects

• Logging & Monitoring

• Network Segmentation

• High Availability

• Firewall troubleshooting

Networking

Good understanding of:

• TCP/IP

• OSI Model

• IPv4 / IPv6

• VLAN

• Trunking

• STP

• LACP

• DHCP

• DNS

• NAT

• Static Routing

• OSPF

• Basic BGP

• Network Segmentation

• Basic QoS

Aruba Networking

Hands-on experience with:

• Aruba Switches

• VLAN configuration

• Access and trunk ports

• STP

• LACP

• Layer 2 / Layer 3 switching

• Routing

• Network troubleshooting

• Aruba Central is an advantage

• Aruba Wireless is an advantage

Troubleshooting Tools

Experience using:

• Ping

• Traceroute

• Wireshark

• Packet capture

• Firewall logs

• Network monitoring tools

• CLI-based troubleshooting