Senior Network Security Engineer

PT Focus Solusi Infotama; Jakarta Utara; On-site; IDR 500.250.000 - 833.751.000; Full time

Job summary

A leading technology company in Indonesia is seeking a Senior Network Security Engineer. The role requires deep expertise in perimeter security, hands-on experience managing Palo Alto Networks and Forcepoint security tools. Responsibilities include designing security architecture, integrating security solutions with SIEM platforms, and troubleshooting complex network issues. Ideal candidates will have 3-5+ years in network security engineering with relevant certifications. This position also requires collaboration with various teams to enhance security measures and maintain documentation.

Qualifications

• 3-5+ years of experience in Network Security Engineering.
• Strong hands-on experience with Palo Alto NGFW & Panorama.
• Knowledge of BGP, OSPF, VLAN, NAT.
• Experience in High Availability (HA) and Inline Security Architecture.
• Able to provide strategic recommendations during security incidents.

Responsibilities

• Design and maintain perimeter security architecture using Palo Alto Networks.
• Administer Forcepoint Web Security and DLP.
• Integrate security infrastructure with SIEM and SOAR.
• Troubleshoot network security issues including latency and packet loss.
• Develop and maintain technical documentation and SOPs.

Skills

Network Security Engineering

Palo Alto NGFW

Traffic visibility

Inline security architecture

Threat visibility

Network Protocols (BGP, OSPF)

Incident handling

Tools

Palo Alto Networks

Forcepoint

Keysight ThreatArmor

Ixia iBypass

Job description

We are looking for a Senior Network Security Engineer with deep expertise in perimeter security, traffic visibility, and inline security infrastructure, with hands‑on experience managing Palo Alto Networks, Forcepoint, Keysight ThreatArmor and Ixia iBypass.

Key Responsibilities

• Design, implement, and maintain enterprise perimeter security architecture using Palo Alto Networks NGFW.
• Perform advanced firewall configuration & hardening,
  • Security Policies, NAT, Zones
  • Routing (Static, OSPF, BGP)
  • App-ID, User-ID, Threat Prevention, WildFire
• Manage ThreatArmor Evision for
  • Threat visibility & traffic classification
  • Monitoring attack behavior & suspicious patterns
  • Threat scoring and security analytics
• Manage Ixia iBypass for
  • Inline security high availability
  • Automatic traffic bypass during device failure
  • Maintaining uninterrupted security enforcement
• Administer Forcepoint Web Security & DLP,
  • Web filtering & content control
  • Data classification & insider threat protection
• Perform advanced troubleshooting for
  • Latency, asymmetric routing, packet loss, inspection bottlenecks
  • SSL inspection issues and performance degradation
• Integrate security infrastructure with SIEM, SOAR, Threat Intelligence Platforms
• Lead
  
  • Firmware upgrades
  • Signature & threat updates
  • License management
  • Capacity planning
• Develop and maintain technical documentation, SOPs, and security architecture diagrams

Collaborate closely with SOC, Network, System, and DevOps teams.

Minimum Qualifications

Mandatory Qualifications

• 3-5+ years of experience in Network Security Engineering
• Strong hands‑on experience with
  • Palo Alto NGFW & Panorama
  • Forcepoint Web Security & DLP
• Strong knowledge of
  • BGP, OSPF, VLAN, NAT
  • IPsec & SSL VPN
  • DMZ, Proxy, and Secure Network Design
• Proven experience with
  • High Availability (HA), Failover, and Inline Security Architecture
  • Firewall & SIEM Integration
  • Root Cause Analysis & Performance Tuning
• Able to handle network-level security incidents and provide strategic recommendations

Nice to Have

• Experience in large-scale enterprise, financial, data center, or government environments
• Experience with Python, Ansible, or Firewall API automation
• Experience supporting 24/7 SOC as L3 escalation

Preferred Certifications

• ✅ PCNSE – Palo Alto Networks Certified Network Security Engineer
• ✅ PCNSA – Palo Alto Networks Certified Network Security Administrator
• ✅ CompTIA CySA+
• ✅ Forcepoint Web Security / DLP Specialist