Cyber Boundary Protection Engineer — Deployable Mission Networks for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 52 000 - 76 000; Plein temps

Résumé du poste

WLG in Mons, Belgium, invites a dedicated third-line firewall engineer to own the boundary protection layer across the mission estate, focusing on next-generation firewalls, rule sets, and audits. You will build, configure and maintain NGFWs, design and review security policies, and implement secure inter-site VPNs.

The role requires hands-on scripting, English fluency, and a pragmatic approach to root-cause analysis, with occasional travel to other European locations.

Qualifications

• At least three years in firewall administration and network security.
• Palo Alto certification (PCNSE or equivalent) is required.
• Security+ or an equivalent security qualification.
• Sound networking fundamentals — protocols, routing, architecture — and VPN technologies.
• Scripting and automation, and the habit of using them.
• Professional English, spoken and written, to a standard that carries a technical briefing.

Responsabilités

• Build, configure and maintain next-generation firewalls across the mission estate, including high-availability pairs and central management.
• Design, implement and review security policies and rulesets, and adapt them as the operational picture changes.
• Configure and troubleshoot VPN and secure interconnection between sites.
• Take third-line incidents through to root cause, working with the network and platform teams rather than throwing tickets over a wall.
• Automate the repetitive parts — signature updates, configuration backups, health checks.
• Keep procedures and security documentation current, and report monthly on service performance.

Connaissances

Firewall administration

Network security

Scripting & automation

English proficiency

Formation

PCNSE certification or equivalent

Security+ or equivalent certification

CISSP or CCNA welcome

Outils

Palo Alto devices

VPN technologies

Description du poste

Every deployed mission network has an edge, and somebody has to be sure of it. This role is that person: third-line engineering on the boundary protection layer — next-generation firewalls, the rulesets that run on them, and the tunnels that carry traffic between sites.

It is a job for someone who is genuinely at home in a firewall policy: not only pushing the change, but arguing about whether the rule should exist, what it opens, and how it will be audited a year from now.

What You Would Be Doing

• Build, configure and maintain next-generation firewalls across the mission estate, including high-availability pairs and central management.


• Design, implement and review security policies and rulesets, and adapt them as the operational picture changes.


• Configure and troubleshoot VPN and secure interconnection between sites.


• Take third-line incidents through to root cause, working with the network and platform teams rather than throwing tickets over a wall.


• Automate the repetitive parts — signature updates, configuration backups, health checks.


• Keep procedures and security documentation current, and report monthly on service performance.

What you would bring

• At least three years in firewall administration and network security.


• Palo Alto certification (PCNSE or equivalent) and real depth in configuration, management and troubleshooting.


• Security+ or an equivalent security qualification.


• Sound networking fundamentals — protocols, routing, architecture — and VPN technologies.


• Scripting and automation, and the habit of using them.


• Professional English, spoken and written, to a standard that carries a technical briefing.

The work is on site in Mons, in normal office hours, with occasional planned night work for change windows and roughly one trip a month to other European locations. CISSP or CCNA is welcome but not expected.