Infrastructure Engineer - Network & Security

Thales Group; Jakarta Pusat; On-site; IDR 450,000,000 - 750,000,000; Full time

Job summary

Thales Group in Jakarta, Indonesia is looking for a Network & Security Infrastructure Engineer to join the Internet and Cloud Access Squad. You will design, implement, and maintain network infrastructures with a focus on proxies, sandbox, and firewall systems, while supporting operations and security compliance.

The role requires hands-on experience with Windows/Linux/ESX environments, ITIL/ITSM knowledge, and strong scripting abilities in Python/PowerShell/Bash.

Qualifications

• Experience configuring network and security infrastructures (Proxies, Sandbox, LAN, WAN, Firewalls).
• Hands-on in Windows and Linux, ESX, and related systems.
• Familiar with ITIL/ITSM processes and project management (Waterfall/Agile).
• Knowledge of cloud security, IAM, PKI, and IaC concepts.
• Proven ability to monitor, troubleshoot, and resolve network issues.

Responsibilities

• Design, implement, and maintain network infrastructures with focus on proxies, sandbox, and firewall systems.
• Provide operational support and proactive performance monitoring for the network.
• Contribute to security and compliance of network environments and document procedures.
• Produce periodic reports on network performance and trends; participate in Agile meetings.

Skills

Strong English communication

Agile collaboration

Analytical thinking

Education

Bachelor's degree or equivalent

Tools

Skyhigh

Zscaler

Trellix

Palo Alto

Fortigate

Stormshield

Check Point

Juniper

Cisco Firepower

VPN AnyConnect

F5 Load Balancers

VMware ESX

Active Directory

Ansible

Python

PowerShell

Bash

Job description

## Infrastructure Engineer - Network & SecurityApply: Jakarta: Full time: Posted Today: R0342508Location: Jakarta, IndonesiaThales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.Thales has been present in the Republic of Indonesia for 45 years in the defence, aerospace and space domains, delivering a wide range of civil and defence solutions that highlight our strong commitment to working with the Indonesian government and local stakeholders. In recent years, our innovative solutions in air traffic management systems and telecom satellites have further strengthened our presence in the country alongside our digital portfolio of solutions such as biometrics, data protection and cybersecurity now serving the needs of diverse customers in civil sectors.As a **Network & Security Infrastructure Engineer**, you will be part of the **Internet and Cloud Access Squad** and actively contribute to various projects and tasks related to **critical infrastructures**. Your main missions will include: * **Infrastructure Projects**: Collaborate with the team to **design, implement, and maintain network infrastructures**, with a focus on **Proxies, Sandbox, and Firewall systems**.* **Operational Support**: Assist in **resolving network-related incidents** and contribute to **proactive performance monitoring** of the network.* **Optimization & Security**: Contribute to the **continuous improvement** of network-related processes and tools while ensuring **security and compliance** of network environments.* **Documentation & Reporting**: Maintain **accurate documentation** of network configurations, operational procedures, and resolved incidents. Produce **periodic reports** on network performance and trends.* **Agile Collaboration**: Participate in **Agile team meetings**, share progress and obstacles, and contribute to **collaborative problem-solving**. **Technical Skills:*** You can define and implement network requirements across various production processes.* You have strong analytical skills and provide real expertise in **Level 3 support**.* You can configure network and security equipment and other IT assets, including: + **Proxies**: Skyhigh (formerly McAfee), Zscaler, SSL inspection, Whitelist/Blacklist management, URL categorization, web filtering, content filtering, CAS. + **Sandbox**: Trellix (formerly McAfee), Zscaler.* You have a strong appetite for automation, backed by solid skills in programming languages: **Curl, PowerShell, Python, Bash**.* You have knowledge of cross-functional infrastructures and security domains, such as: + **Firewalls**: Palo Alto, Fortigate, Stormshield, Check Point, Juniper, L3/L4 Filtering, User-ID, App-ID, Next-Gen features. + **Cloud Security**: SASE, Zero Trust Network Access (ZTNA), DLP, CASB, SD-WAN, SWG. + **Directories**: Active Directory, LDAPS. + **IAM (Identity & Access Management)**: Kerberos, SAML, Single Sign-On (SSO), Multi-Factor Authentication (MFA). + **PKI (Public Key Infrastructure)**: x509 certificates, CMS, AEP, OCSP. + **Cloud Computing**: SaaS, IaaS, PaaS, Infrastructure as Code (IaC), automation via scripting (Python/Shell). + **Virtualized Environments**: ESX, VMs. + **VPN Gateways**: Cisco Firepower, Stormshield, AnyConnect client, The Greenbow client. + **Load Balancers**: F5 (LTM, APM), VMware NSX. **Soft Skills:*** You define solutions based on complexity.* You have the ability to work effectively in an Agile environment, with a results-oriented approach.* You anticipate, think big, start small, test and learn, fail fast, encourage collective intelligence while remaining value driven.* You are empathetic and committed to user satisfaction.* You can work with all levels of personnel within and outside your function and across various entities (e.g., CBU, countries, regions) with international teams.* You have a strong command of professional English (spoken and written) for effective communication within international teams.* You possess excellent planning and organizational skills.* You have a strong ability to learn quickly and adapt to new technologies and procedures.* You are autonomous, organized, dynamic, and a driver of change management, fostering teamwork in a fast-paced environment.* You have strong technical writing skills.* You are familiar with Thales’ IS/IT organization and passionate about the Group’s IS/IT transformation.* You have a good understanding of Thales’ context (e.g., key IS/IT stakeholders, matrix organization).* You are committed to Agile and digital workstyles that enhance collaboration and break down silos.* You have programming/scripting skills (Python, PowerShell, Bash) for task automation.* You are familiar with automation principles and orchestration tools like Ansible. **Required Experience:*** Prior experience in configuring **network and security infrastructures** (Proxies, Sandbox, LAN, Wi-Fi, WAN, Routers, Switches, Firewalls, etc.).* Hands-on experience with **system environments** (Windows, Linux, ESX, etc.).* Previous experience in **project management** (Waterfall or Agile).* Knowledge of **ITIL processes** and **ITSM tools**.* Experience in **monitoring network performance**, troubleshooting, diagnosing, and resolving software, hardware, and other network/system issues.* **Education**: Bachelor's degree or equivalent, master's degree would be advantage.* Due to the nature of the work, strong English skills, both written and verbal are required to effectively manage stakeholders.At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.