Network Security Engineer

UltraCon Consultoria; Rio de Janeiro; On-site; BRL 180,000 - 300,000; Full time

Job summary

UltraCon Consultoria in Brazil is seeking a Senior Network Security Engineer to support enterprise security operations, focusing on firewall administration, load balancing, NAC, and incident resolution. The role demands hands-on expertise with Palo Alto PAN-OS, FortiGate, F5 LTM/GTM, and Cisco ISE, plus strong networking fundamentals.

You will configure and troubleshoot security appliances, manage firewall rules, perform security assessments, and maintain documentation.

Qualifications

• Senior-level hands-on experience in Network Security Engineering.
• Hands-on experience with Palo Alto Networks firewalls and PAN-OS.
• Experience with FortiGate firewalls and policy management.
• Experience configuring and managing F5 LTM/GTM load balancers.
• Working knowledge of Cisco ISE and network access control.
• Strong knowledge of networking protocols and security controls.
• Ability to perform incident response, security monitoring, and vulnerability remediation.
• Understanding of Zero Trust architecture and access control models.
• Onsite availability in Rio de Janeiro three days per week.

Responsibilities

• Configure, administer, maintain, and troubleshoot Palo Alto Networks firewalls running PAN-OS.
• Configure, maintain, and troubleshoot FortiGate firewalls.
• Configure and manage F5 LTM/GTM load balancing solutions.
• Support Cisco Identity Services Engine (ISE), including network access control policies and integrations.
• Manage and maintain network security policies and firewall rules.
• Investigate and troubleshoot complex network and security incidents.
• Perform security assessments and firewall audits.
• Support Cisco ISE and cloud security environments.
• Maintain technical documentation related to network security infrastructure and operations.
• Participate in on-call rotations when required.

Skills

Senior Network Security Engineer

Palo Alto PAN-OS

FortiGate

F5 LTM/GTM

Cisco ISE

Network protocols

Incident response

Threat mitigation

Zero Trust

Access control

Tools

PAN-OS

FortiGate

F5 LTM/GTM

Cisco ISE

Splunk

QRadar

Job description

- Work Time: Business Hours

Position Overview

We are looking for a Senior Network Security Engineer to support enterprise network security infrastructure and operations, focusing on firewall administration, load balancing, network access control, and security incident resolution.

The professional will be responsible for configuring, maintaining, and troubleshooting network security solutions, ensuring the effective implementation of security policies, network protection, and access controls.

The position requires strong hands-on experience with Palo Alto Networks, FortiGate, F5 LTM/GTM, and Cisco ISE, combined with solid networking fundamentals and practical experience in security operations.

Key Responsibilities

• Configure, administer, maintain, and troubleshoot Palo Alto Networks firewalls running PAN-OS.
• Configure, maintain, and troubleshoot FortiGate firewalls.
• Configure and manage F5 LTM/GTM load balancing solutions.
• Support Cisco Identity Services Engine (ISE), including network access control policies and integrations.
• Manage and maintain network security policies and firewall rules.
• Investigate and troubleshoot complex network and security incidents.
• Perform security assessments and firewall audits.
• Support Cisco ISE and cloud security environments.
• Maintain technical documentation related to network security infrastructure and operations.
• Participate in on-call rotations when required.

Mandatory Requirements

• Senior-level hands-on experience in Network Security Engineering.
• Strong practical experience with Palo Alto Networks firewalls and PAN-OS, including configuration, troubleshooting, security policies, and administration.
• Hands-on experience with FortiGate firewalls, including configuration, troubleshooting, and policy management.
• Experience configuring and managing F5 LTM/GTM load balancers.
• Working knowledge of Cisco ISE, including policy configuration, network access control, and integration.
• Strong knowledge of networking protocols and technologies:
• Experience with network security policies, intrusion prevention, threat mitigation, and firewall rule management.
• Practical experience in incident response, security monitoring, vulnerability remediation, and security assessments.
• Understanding of network segmentation, Zero Trust architecture, and access control models.
• Availability to work onsite in Rio de Janeiro three days per week.
• Acceptance of full-time CLT employment.

Preferred Qualifications

• Experience with cloud security in AWS, Microsoft Azure, or Google Cloud Platform (GCP), including:
  • Azure Network Security Groups (NSGs)
  • GCP firewall rules
• Experience with automation or scripting using Python, Bash, or Ansible.
• Experience with Security Information and Event Management (SIEM) platforms, such as Splunk or IBM QRadar.
• Relevant technical certifications, such as:
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)
  • AWS Security certifications
  • Microsoft Azure Security certifications