Senior Engineer (Firewall and VPN)

Auxis LLC; Bogotá; Presencial; COP 120.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

Auxis LLC in Bogotá is seeking a Senior Engineer for Firewall and VPN to design and implement security controls protecting data centers, offices, and cloud environments. You will influence policy writing, handle complex migrations, and troubleshoot end-to-end connectivity and tunnel issues.

This hands-on engineering role requires strong skills in firewall platforms, IPsec/SSL VPNs, and scripting for automation; mentoring junior engineers and improving the rule base over time will be part of the

Formación

• Five+ years in network or network security engineering.
• At least three years administering enterprise firewalls.
• Hands-on experience with at least one major firewall platform and its management console.
• Experience delivering IPsec and SSL VPN services; strong TCP/IP, DNS and TLS knowledge.
• Scripting or API automation experience for configuration and reporting.

Responsabilidades

• Design, implement, and validate firewall policy, NAT, and segmentation changes across on-prem and cloud enforcement points.
• Build and maintain remote access and site-to-site VPN services with certificate and client posture checks.
• Perform platform upgrades, failover testing, and hardware replacements within change windows.
• Troubleshoot connectivity and performance issues using packet capture and log analysis; drive root cause resolution.
• Automate rule analysis and backup, and mentor junior engineers on policy design and change discipline.

Conocimientos

English B2+

5+ years network security engineering

Firewall administration

VPN design and deployment

Scripting / API automation

Herramientas

Firewall management consoles

IPsec VPN tooling

TLS tooling

Descripción del empleo

Job Summary

The Senior Engineer for Firewall and VPN designs and implements the network security controls that protect the firm's data centers, offices, and cloud environments. The role handles the complex changes and migrations that routine operations cannot absorb, troubleshoots connectivity and tunnel failures end to end, and improves the quality of the rule base over time. It is a hands-on engineering position with strong influence over how policy is written and enforced.

Responsibilities

• Design, implement, and validate firewall policy, network address translation, and segmentation changes across on-premises and cloud enforcement points.
• Build and maintain remote access and site-to-site VPN services, including tunnel configuration, certificate and identity integration, and client posture checks.
• Perform platform upgrades, failover testing, and hardware replacements within approved change windows, with tested rollback procedures.
• Troubleshoot complex connectivity and performance problems using packet capture and log analysis, and drive them to root cause with the network and application owners.
• Automate rule analysis, recertification evidence, and configuration backup, and mentor junior engineers on policy design and change discipline.

Skills and Experience

Required Qualifications

• English B2+
• Five or more years in network or network security engineering, with at least three years administering enterprise firewalls.
• Hands-on expertise with at least one major firewall platform and its central management console, including policy, NAT, routing, and high availability configuration.
• Practical experience delivering IPsec and SSL VPN services, and a solid grasp of TCP/IP, routing protocols, DNS, and TLS.
• Ability to script or use platform APIs to automate configuration, reporting, and rule review tasks.

Preferred Qualifications

• Certification such as PCNSE, NSE 5 or above, CCNP Security, or an equivalent vendor credential.
• Experience with cloud-native firewalls, secure web gateways, or zero trust network access deployments.