Specialist Network Security Engineer (Firewall)

Commerz Global Service Solutions; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

Commerz Global Service Solutions seeks a Network Security Engineer (Firewall) to join a team focused on network-security services. The role emphasizes technical execution, firewall policy implementation, lifecycle management, and coordinated upgrades across infrastructure.

You will collaborate with global counterparts in London, New York and Singapore, handle security incidents, and contribute to internal documentation and policy improvements.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Network Engineering or a related discipline.
• Relevant firewall or network-security certification is advantageous.
• 3–6 years of enterprise firewall or network-security operations experience.

Responsibilities

• Administer Firewall, Site to Site VPN and SSL Interception environments.
• Evaluate and configure policy requests; handle requests, incidents, changes and problems.
• Advise customers on how to secure their applications.
• Setup and troubleshoot traffic flows with Guardicore.
• Setup and troubleshoot S2S VPN connections.
• Collaborate with internal departments and external vendors.

Skills

Network security concepts

Troubleshooting

Stakeholder communication

Independent work

Incident response

Education

Bachelor's degree in IT/CS/Network Engineering

Firewall/network-security certification

Tools

Guardicore

VMware

Windows Server

RHEL

Wireshark

Job description

• As a Network Security Engineer (Firewall) you will work in a team focused on network-security related services. The primary focus of a network-security engineer is technical.
• You would be responsible for implementing and operating network-security related services together with other members of your team. These tasks include security policy implementation on firewall devices, lifecycle-management, participation in firewall upgrades and changes related to the infrastructure.

Key Activities:

• Administration of Firewall, Site to Site VPN and SSL Interception environment
• Evaluation and configuration of policies requests;
• Handling of Requests, Incidents, Changes and Problems;
• Advising customers on how to secure their applications;
• Setup and troubleshooting of Traffic-flows with Guardicore;
• Setup and troubleshooting of S2S VPN connections
• Communicating with different internal departments as well as external companies and vendors;
• Organizing Software-Maintenance and Agent-Rollouts with vendor and Server-Admins;
• Working closely with our global network/security counterparts in London, New York and Singapore;
• Following company guidelines and ensure that all internal requirements and standards are met;
• Helping to keep the internal documentation up to date

Main Skills Requirement:

• Understanding Network Security principles and best practices
• Experience with tools for network-micro segmentation, policy-Settings to regulate traffic flows based on labels (preferred with Guardicore)
• Experience with firewall technology
• Network theory and services (TCP/IP, UDP/IP, 7 layers of OSI, DNS, DHCP)
• Experience running and supporting high availability infrastructure
• Experience in x86 Server Operating Systems, Windows and Linux (RHEL)
• Experience in Virtualization VMware
• Experience with Office 365, especially performing and analyzing pivots in Excel
• Experience working with IPSec/SSL

Alternative Skills Requirement:

• Experience with large network integration with Public Cloud (Azure and/or GCP)
• Packet capture analysis as required during incident resolution using various tools such as Wireshark, and network protocol analyzers
• Ability to demonstrate analytical end to end troubleshooting and problem-solving skills
• Experience in organizational tasks, such as Agent-Rollout in a large company with foreign branches.
• Basic knowledge in SIEM aspects and the corresponding tools such as ArcSight.
• Experience with SSL Interception technologies

Personal Skills:

• 3 to 6 years of experience in enterprise firewall or network-security operations
• Demonstrates on handling security related incidents, changes and firmware/SW upgrades for HA environment
• Strong analytical troubleshooting and stakeholder communication skills
• Ability to work independently, take technical ownership and provide guidance within the team
• Experience in a regulated, global or large-scale enterprise environment is an advantage

Formal Education:

• Bachelor’s degree in Information Technology, Computer Science, Network Engineering or a related discipline; equivalent relevant professional experience may be considered
• Relevant firewall or network-security certification is an advantage (for example, Fortinet, Cisco or equivalent)