Network Engineer - Zero Trust & Palo Alto (Hybrid)

ICEYE; Espoo; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

ICEYE, the world‑leading spaceborne SAR company, seeks a Network Engineer in Espoo to design, deploy, and protect our enterprise network across HQ, sites, and data centers. You’ll work with IT/security teams to implement Zero Trust, overlay networks, and robust connectivity globally.

You will manage firewalls, VPNs, and cloud network services, collaborating across IT to keep services highly available. Hybrid work model offered; security screening may apply.

Qualifications

• 3+ years of hands‑on experience administering enterprise wired and wireless network environments (equivalent to CCNA level or working toward CCNP).
• Practical experience configuring and operating enterprise switches and routers (Cisco IOS, Juniper JUNOS).
• Hands‑on experience administering Next‑Generation Firewalls, with practical exposure to Palo Alto Networks.
• Solid understanding of core networking protocols (TCP/IP, VLANs, DNS/DHCP) and dynamic routing (OSPF, BGP).
• Practical understanding of Zero Trust Network Access (ZTNA) principles, least‑privilege network segmentation, and 802.1X/RADIUS.
• Experience configuring and troubleshooting VPN technologies (IPsec site‑to‑site, SSL VPN, or WireGuard).
• Pragmatic problem‑solving skills with a collaborative, service‑minded approach to resolving technical incidents.
• Willingness to travel (new site setup / existing site management) up to 2 times a month.

Responsibilities

• Deploy, configure, and maintain enterprise network devices across ICEYE’s Espoo HQ, international sites, and data centers.
• Administer and maintain Next‑Generation Firewalls and cloud security solutions, focusing on Palo Alto Networks and Prisma Access.
• Implement, support, and audit ZTNA policies, network microsegmentation, and modern remote‑access workflows.
• Manage and troubleshoot VPN technologies (IPsec/SSL, WireGuard).
• Proactively monitor network performance, link health, and system availability to prevent bottlenecks.
• Investigate and resolve Tier 2/3 network incidents and service requests globally.
• Maintain accurate network topology diagrams, rack elevations, IP schemes, and SOP documentation.

Skills

CCNA level

Enterprise switches/routers

OSPF/BGP

ZTNA principles

VPN technologies

Network incident troubleshooting

Travel readiness

Tools

Cisco IOS

Juniper JUNOS

Palo Alto Prisma Access

Prisma SD‑WAN

WireGuard

Tailscale

NetBird

Ansible

Terraform

Job description

ICEYE, the world‑leading spaceborne SAR company, seeks a Network Engineer in Espoo to design, deploy, and protect our enterprise network across HQ, sites, and data centers. You’ll work with IT/security teams to implement Zero Trust, overlay networks, and robust connectivity globally.

You will manage firewalls, VPNs, and cloud network services, collaborating across IT to keep services highly available. Hybrid work model offered; security screening may apply.