Specialist Network Security Engineer (Firewall)

Job Purpose:

• As a Network Security Engineer (Firewall) you will work in a team focused on network-security related services. The primary focus of a network-security engineer is technical.
• You would be responsible for implementing and operating network-security related services together with other members of your team. These tasks include security policy implementation on firewall devices, lifecycle-management, participation in firewall upgrades and changes related to the infrastructure.

Key Activities:

• Administration of Firewall, Site to Site VPN and SSL Interception environment
• Evaluation and configuration of policies requests;
• Handling of Requests, Incidents, Changes and Problems;
• Advising customers on how to secure their applications;
• Setup and troubleshooting of Traffic-flows with Guardicore;
• Setup and troubleshooting of S2S VPN connections
• Communicating with different internal departments as well as external companies and vendors;
• Organizing Software-Maintenance and Agent-Rollouts with vendor and Server-Admins;
• Working closely with our global network/security counterparts in London, New York and Singapore;
• Following company guidelines and ensure that all internal requirements and standards are met;
• Helping to keep the internal documentation up to date

Main Skills Requirement:

• Understanding Network Security principles and best practices
• Experience with tools for network-micro segmentation, policy-Settings to regulate traffic flows based on labels (preferred with Guardicore)
• Experience with firewall technology
• Network theory and services (TCP/IP, UDP/IP, 7 layers of OSI, DNS, DHCP)
• Experience running and supporting high availability infrastructure
• Experience in x86 Server Operating Systems, Windows and Linux (RHEL)
• Experience in Virtualization VMware
• Experience with Office 365, especially performing and analyzing pivots in Excel
• Experience working with IPSec/SSL

Alternative Skills Requirement:

• Experience with large network integration with Public Cloud (Azure and/or GCP)
• Packet capture analysis as required during incident resolution using various tools such as Wireshark, and network protocol analyzers
• Ability to demonstrate analytical end to end troubleshooting and problem-solving skills
• Experience in organizational tasks, such as Agent-Rollout in a large company with foreign branches.
• Basic knowledge in SIEM aspects and the corresponding tools such as ArcSight.
• Experience with SSL Interception technologies

Personal Skills:

• 3 to 6 years of experience in enterprise firewall or network-security operations
• Demonstrates on handling security related incidents, changes and firmware/SW upgrades for HA environment
• Strong analytical troubleshooting and stakeholder communication skills
• Ability to work independently, take technical ownership and provide guidance within the team
• Experience in a regulated, global or large-scale enterprise environment is an advantage

Formal Education:

• Bachelor’s degree in Information Technology, Computer Science, Network Engineering or a related discipline; equivalent relevant professional experience may be considered
• Relevant firewall or network-security certification is an advantage (for example, Fortinet, Cisco or equivalent)