Network Security Engineer — Deployable Communications Boundary for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

WLG in Mons, Belgium, is seeking a third-line firewall engineer to manage next-generation firewalls on-site. You will design and refine security policies, implement VPN interconnections, and lead incident resolution with cross-functional teams.

The role emphasizes scripting/automation, rigorous documentation, and monthly performance reporting. Fluency in professional English is required, with occasional travel to other European locations.

Qualifications

• At least three years in firewall administration and network security.
• Palo Alto certification (PCNSE or equivalent) and depth in configuration, management and troubleshooting.
• Security+ or an equivalent security qualification.
• Solid networking fundamentals — protocols, routing, architecture — and VPN technologies.
• Scripting and automation, and the habit of using them.
• Professional English, spoken and written, to a standard that carries a technical briefing.

Responsabilités

• Build, configure and maintain next-generation firewalls across the mission estate, including high-availability pairs and central management.
• Design, implement and review security policies and rulesets, and adapt them as the operational picture changes.
• Configure and troubleshoot VPN and secure interconnection between sites.
• Take third-line incidents through to root cause, working with the network and platform teams rather than throwing tickets over a wall.
• Automate the repetitive parts — signature updates, configuration backups, health checks.
• Keep procedures and security documentation current, and report monthly on service performance.

Connaissances

Firewall administration

Network security

Palo Alto PCNSE

Security+ certification

VPN technologies

Scripting

English language

Outils

None

Description du poste

Every deployed mission network has an edge, and somebody has to be sure of it. This role is that person: third-line engineering on the boundary protection layer — next-generation firewalls, the rulesets that run on them, and the tunnels that carry traffic between sites. It is a job for someone who is genuinely at home in a firewall policy: not only pushing the change, but arguing about whether the rule should exist, what it opens, and how it will be audited a year from now.

What You Would Be Doing

• Build, configure and maintain next-generation firewalls across the mission estate, including high-availability pairs and central management.
• Design, implement and review security policies and rulesets, and adapt them as the operational picture changes.
• Configure and troubleshoot VPN and secure interconnection between sites.
• Take third-line incidents through to root cause, working with the network and platform teams rather than throwing tickets over a wall.
• Automate the repetitive parts — signature updates, configuration backups, health checks.
• Keep procedures and security documentation current, and report monthly on service performance.

What you would bring

• At least three years in firewall administration and network security.
• Palo Alto certification (PCNSE or equivalent) and real depth in configuration, management and troubleshooting.
• Security+ or an equivalent security qualification.
• Sound networking fundamentals — protocols, routing, architecture — and VPN technologies.
• Scripting and automation, and the habit of using them.
• Professional English, spoken and written, to a standard that carries a technical briefing.

The work is on site in Mons, in normal office hours, with occasional planned night work for change windows and roughly one trip a month to other European locations. CISSP or CCNA is welcome but not expected.