Senior Network & Security Engineer

Swiss Post Cybersecurity AG; Aarau; On-site; CHF 110,000 - 150,000; Full time

Job summary

Swiss Post Cybersecurity AG is seeking a skilled Network & Security Engineer to design, implement, and operate secure infrastructures for enterprise clients. You will work with Fortinet and Cisco security components, manage VPNs, WAF/IAM, and drive hardening efforts.

Join a growing Swiss team focused on defending digital assets, leading firewall and network integration projects, deploying vulnerability solutions, and collaborating with customers and colleagues to deliver robust security

Qualifications

• At least 3 years' experience in a similar role, ideally with an IT service provider.
• Degree in Computer Science, IT, Cyber Security, or a related technical field.
• Hands-on experience with Fortinet and Cisco Network Security Components.
• Certifications such as NSE4 - NSE7 and/or CCNP are a must.
• Mastering of TCP/IP and strong understanding of network design principles like high-availability, geographical redundancy, static and dynamic routing.
• Understanding of network security principles, best practices, and hardening methodologies.
• Practical experience on gitOps deployments.
• Knowledge of Web Application Firewalls and IAM/SSO solutions.
• Practical experience with enterprise VPN technologies (Remote Access, Site-to-Site).
• Fluent communication in English and German.
• Experience with Ergon Airlock WAF / IAM is a plus.
• Experience of operating vulnerability management tools (Tenable).
• Consulting experience, ability to directly communicate, plan and execute technical delivery with customers, including escalation and problem management.

Responsibilities

• Operate and support firewall and gateway products (Fortinet, Cisco) on 1st/2nd level support.
• Maintain networks across Layer 2/3 (Cisco Catalyst/Nexus) and Layer 7 security.
• Manage vulnerability management platforms to ensure compliance and threat mitigation.
• Regularly deploy software security updates in maintenance sessions.
• Lead and contribute to firewall and network integration projects, including planning and migration of complex environments.
• Develop and manage Airlock WAF/IAM SSO infrastructures.

Skills

Fortinet

Cisco devices

WAF IAM SSO

Vulnerability management

GitOps deployments

VPN technologies

TCP/IP routing

English fluency

German fluency

Education

Degree in Computer Science / IT

Tools

Tenable

Airlock WAF

Job description

KG Selma Hrustic [phone] Swiss Post Cybersecurity provides security solutions to protect digital assets and data, all developed and operated in Switzerland. With about 150 employees, we support more than 350 customers in Europe. We are headquartered in Aarau, with offices in Morges and Luxembourg. Formed in 2024 from terreActive and Hacknowledge, we are a subsidiary of Swiss Post.

We are looking for a highly skilled Network & Security Engineer. You will work closely with customers and internal stakeholders to build robust, secure, and future-proof security infrastructures. Join our team and defend the digital future with us!

Your tasks

• Operate, monitor, maintain, and support firewall and gateway products mainly based on Fortinet and Cisco products (first and second level support)
• Operate, monitor and maintain networks across Layer 2, Layer 3 (Cisco Catalyst and Nexus) Operate, monitor and maintain Web Application security solutions (Layer 7)
• Operate and maintain vulnerability management platforms to ensure continuous security compliance and threat mitigation
• Regularly deploy software security updates in maintenance sessions (during and off- business hours)
• Lead and contribute to firewall and network integration projects, including the planning, execution and migration of complex productive environments.
• Manage and develop Airlock WAF/IAM SSO infrastructures

Your Skills

• At least 3 years' experience in a similar role, ideally with an IT service provider
• Degree in Computer Science, IT, Cyber Security, or a related technical field
• Hands-on experience with Fortinet and Cisco Network Security Components
• Certifications such as NSE4 - NSE7 and/or CCNP are a must
• Mastering of TCP/IP and strong understanding of network design principles like high-availability, geographical redundancy, static and dynamic routing
• Understanding of network security principles, best practices, and hardening methodologies
• Practical experience on gitOps deployments
• Knowledge of Web Application Firewalls and IAM/SSO solutions
• Practical experience with enterprise VPN technologies (Remote Access, Site-to-Site)
• Fluent communication in English and German
• Experience with Ergon Airlock WAF / IAM is a plus
• Experience of operating vulnerability management tools (Tenable)
• Consulting experience, ability to directly communicate, plan and execute technical delivery with customers, including escalation and problem management