Network Security Engineer — Deployable Communications Boundary for NATO with security clearance

Wlgroup; Henegouwen; Sur place; EUR 55 000 - 85 000; Plein temps

Résumé du poste

Wlgroup in Belgium seeks a third-line security engineer to manage next‑generation firewalls, design and enforce policies, and maintain secure intersite connections. You will work on high-availability setups and central management, ensuring auditable rules and reliable VPN links across sites.

In addition to three years of firewall experience, a Palo Alto PCNSE or equivalent certification and Security+ or similar credentials are highly valued.

Qualifications

• At least three years in firewall administration and network security.
• PCNSE or equivalent Palo Alto certification is desirable.
• Security+ or equivalent security qualification is preferred.
• Solid networking fundamentals—protocols, routing, and VPN technologies.
• Scripting and automation skills to reduce manual work.
• Professional English, written and spoken, for technical briefings.

Responsabilités

• Build, configure and maintain next-generation firewalls across the mission estate, including high-availability pairs and central management.
• Design, implement and review security policies and rulesets, and adapt them as the operational picture changes.
• Configure and troubleshoot VPN and secure interconnection between sites.
• Take third-line incidents through to root cause, collaborating with network and platform teams.
• Automate routine tasks such as signature updates, backups and health checks and keep documentation current.
• Report monthly on service performance and ensure procedures are up to date.

Connaissances

Firewall administration

Network security

Scripting & automation

VPN technologies

Professional English

Outils

Palo Alto (firewall)

Description du poste

Every deployed mission network has an edge, and somebody has to be sure of it. This role is that person: third-line engineering on the boundary protection layer - next-generation firewalls, the rulesets that run on them, and the tunnels that carry traffic between sites.

It is a job for someone who is genuinely at home in a firewall policy: not only pushing the change, but arguing about whether the rule should exist, what it opens, and how it will be audited a year from now.

What you would be doing

• Build, configure and maintain next-generation firewalls across the mission estate, including high-availability pairs and central management.
• Design, implement and review security policies and rulesets, and adapt them as the operational picture changes.
• Configure and troubleshoot VPN and secure interconnection between sites.
• Take third-line incidents through to root cause, working with the network and platform teams rather than throwing tickets over a wall.
• Automate the repetitive parts - signature updates, configuration backups, health checks.
• Keep procedures and security documentation current, and report monthly on service performance.

What you would bring

• At least three years in firewall administration and network security.
• Palo Alto certification (PCNSE or equivalent) and real depth in configuration, management and troubleshooting.
• Security+ or an equivalent security qualification.
• Sound networking fundamentals - protocols, routing, architecture - and VPN technologies.
• Scripting and automation, and the habit of using them.
• Professional English, spoken and written, to a standard that carries a technical briefing.

The work is on site in Mons, in normal office hours, with occasional planned night work for change windows and roughly one trip a month to other European locations. CISSP or CCNA is welcome but not expected.