Senior Network Security Engineer

In4Matic; Brussel; On-site; EUR 95,000 - 125,000; Full time

Job summary

In4Matic is seeking a Senior Network Security Engineer to manage and evolve a multi-site security environment in Belgium. You will lead migrations from existing firewall platforms, design secure traffic flows, and harden infrastructure while ensuring operational continuity.

The role blends hands-on responsibilities with transformation projects, requiring strong English communication and autonomous execution. French/Dutch language skills are valued.

Qualifications

• Minimum 5 years of professional experience in network security.
• Fluent technical English; French/Dutch knowledge is a plus.
• Degree in Computer Science, IT or related field, or equivalent experience.
• Security certifications such as PCNSA or PCNSE add value.

Responsibilities

• Manage, configure and optimize Palo Alto Networks NGFW and Panorama environments.
• Lead firewall and security policy migrations, including analysis and validation.
• Contribute to network security architecture design focusing on segmentation and hardening.
• Participate in VPN, dynamic routing, and cross-site security projects.
• Develop and maintain technical documentation and security guidelines.
• Advise on secure connections with external partners and remediation of vulnerabilities.

Skills

Network security

Troubleshooting

English fluency

Independent work

Documentation

Education

CS/IT degree

PCNSA/PCNSE certs

Tools

Palo Alto NGFW

Panorama

App-ID

User-ID

Content-ID

URL Filtering

WildFire

GlobalProtect

F5 BIG-IP

Job description

We’re looking for a Senior Network Security Engineer to join our client’s team and play a key role in managing, securing and continuously evolving a critical multi-site network security environment. The role combines hands-on operational responsibility with major transformation initiatives, including the controlled migration of firewall infrastructure from one technology platform to another. You will work in a technically demanding environment where reliability, security and operational continuity are essential.

Role & Responsibilities

• Manage, configure, administer and optimize Palo Alto Networks NGFW and Panorama environments.
• Lead and execute firewall and security policy migrations, including analysis, preparation, implementation and validation.
• Contribute to the design and evolution of network security architectures, with a focus on segmentation, hardening and secure traffic flows.
• Participate in projects involving network segmentation, infrastructure hardening, VPN connectivity and dynamic routing.
• Support interoperability with F5 BIG-IP and other network security technologies.
• Perform advanced troubleshooting and contribute to the resolution of critical incidents in a multi-site production environment.
• Participate in changes and deployments within critical production environments while maintaining operational continuity.
• Develop and maintain accurate technical documentation, operational procedures and security guidelines.
• Advise on technical solutions for securing connections with external partners through intranet and internet environments.
• Identify and implement appropriate measures to remediate vulnerabilities.

Technical Profile

• Palo Alto Networks NGFW and Panorama, including App-ID, User-ID, Content-ID, URL Filtering, WildFire and GlobalProtect.
• Firewall migration projects, including analysis of existing rules, objects, NAT and VPN configurations and the preparation of migration matrices.
• Forcepoint/Stonesoft environments and the migration of existing firewall policies towards Palo Alto Networks.
• F5 BIG-IP, particularly LTM, with knowledge of ASM/AWAF, load balancing and reverse proxy technologies considered an advantage.
• Network security fundamentals including TCP/IP, VLANs, VPN technologies and dynamic routing protocols such as BGP and OSPF.
• Network segmentation, infrastructure hardening and secure traffic-flow architectures.
• Microsoft Azure environments, proxy/WAF solutions and SOC/SecOps environments are considered additional assets.

Experience & Profile

• Minimum 5 years of professional experience in network security, with a clearly senior and autonomous profile.
• Strong troubleshooting skills and the ability to operate effectively during critical incidents.
• Comfortable combining day-to-day operational responsibilities with strategic network security transformation projects.
• Able to work independently under general direction while taking ownership of complex technical assignments.
• Strong written and verbal communication skills, with the ability to document technical work accurately and collaborate with network, security, systems, operations and project teams.
• Fluent technical English is required. Knowledge of French and Dutch is highly valued, with bilingual proficiency considered an advantage.
• Degree in Computer Science, IT or a related discipline, or equivalent professional experience.
• Certifications such as PCNSA or PCNSE are an advantage; F5 or additional security certifications are also considered a plus.

Contactperson & Reference

• Reference #: INW28268
• Marilyn Weytens
• [e-mail]