Senior Engineer Network and Firewall (Assistant Manager)

Auxis; Bogotá ciudad; Presencial; COP 133.920.000 - 200.880.000; Jornada completa

Descripción de la vacante

Auxis in Bogotá is seeking a Senior Engineer for Firewall and VPN who will design and implement security controls protecting data centers, offices, and cloud environments. You will handle complex changes, migrations, and troubleshoot end-to-end connectivity and tunnel failures, influencing policy design and enforcement.

This hands-on role requires deep experience with enterprise firewalls, IPsec/SSL VPNs, and scripting or API use to automate configurations and reporting.

Formación

• Five or more years in network or network security engineering.
• Hands-on firewall platform expertise and central management experience.
• Experience delivering IPsec and SSL VPN services.
• Scripting or API skills to automate configuration and reporting.

Responsabilidades

• Design, implement, and validate firewall policy, NAT, and segmentation changes across on-premises and cloud enforcement points.
• Build and maintain remote access and site-to-site VPN services, including tunnel configuration and client posture checks.
• Perform platform upgrades, failover testing, and hardware replacements within change windows with rollback procedures.
• Troubleshoot complex connectivity and performance problems using packet capture and log analysis, driving root cause with owners.
• Automate rule analysis, recertification evidence, and configuration backup, and mentor junior engineers on policy design.

Conocimientos

English B2+

5+ yrs exp

Firewall admin

VPN/IPsec

Scripting/APIs

Herramientas

Palo Alto

Fortinet

Descripción del empleo

Job Summary

The Senior Engineer for Firewall and VPN designs and implements the network security controls that protect the firm's data centers, offices, and cloud environments. The role handles the complex changes and migrations that routine operations cannot absorb, troubleshoots connectivity and tunnel failures end to end, and improves the quality of the rule base over time. It is a hands-on engineering position with strong influence over how policy is written and enforced.

Responsibilities

• Design, implement, and validate firewall policy, network address translation, and segmentation changes across on-premises and cloud enforcement points.


• Build and maintain remote access and site-to-site VPN services, including tunnel configuration, certificate and identity integration, and client posture checks.


• Perform platform upgrades, failover testing, and hardware replacements within approved change windows, with tested rollback procedures.


• Troubleshoot complex connectivity and performance problems using packet capture and log analysis, and drive them to root cause with the network and application owners.


• Automate rule analysis, recertification evidence, and configuration backup, and mentor junior engineers on policy design and change discipline.

Skills and Experience

• English B2+ or Higher


• Five or more years in network or network security engineering, with at least three years administering enterprise firewalls.


• Hands-on expertise with at least one major firewall platform and its central management console, including policy, NAT, routing, and high availability configuration.


• Practical experience delivering IPsec and SSL VPN services, and a solid grasp of TCP/IP, routing protocols, DNS, and TLS.


• Ability to script or use platform APIs to automate configuration, reporting, and rule review tasks.

Preferred Qualifications

• Certification such as PCNSE, NSE 5 or above, CCNP Security, or an equivalent vendor credential.


• Experience with cloud-native firewalls, secure web gateways, or zero trust network access deployments.