Senior Network Security Engineer

Doghouse Recruitment; Amsterdam; On-site; EUR 70,000 - 110,000; Full time

Job summary

Doghouse Recruitment in Amsterdam is seeking a Network Security Engineer to design and implement security for data center fabrics, backbone links and corporate networks. You will turn security requirements into hands-on configurations and run what you build.

This is a hands-on role focusing on firewalls, IPS/IDS, ZTNA, and SASE, with security automation across multi-vendor devices. Collaboration across teams and a Zero Trust mindset are essential.

Qualifications

• Solid hands-on with core protocols TCP/IP, DNS, TLS, IPsec, HTTP(S) and routing.
• Experience with data center networking: EVPN, MPLS L3VPN, MP-BGP, L2VPN.
• Hands-on with enterprise firewalls (Palo Alto, Check Point, Fortinet) including IPS and identity provider integration.
• Scripting or automation in Python or Go.

Responsibilities

• Build and maintain network security designs based on Zero Trust across data center and corporate environments.
• Implement segmentation and access policies; secure remote access.
• Deploy and validate large-scale protections such as IPS/NDR and DDoS mitigation.
• Connect next-generation firewalls to identity providers and keep management and logging organized.
• Operate application-aware inspection, user-based policy, ZTNA and SASE components.
• Work with observability and flow-analysis tooling.
• Maintain health through hardening, patches, upgrades and vulnerability follow-up.

Skills

Network security

Zero Trust

IP networking

Python/Go scripting

Linux/Unix

Multi-vendor networks

Tools

Palo Alto

Check Point

Fortinet

Ansible

Terraform

NetBox

Job description

Network Security Engineer | Cloud and AI infrastructure | EU

About the company

A well-funded, growing infrastructure provider building the cloud platform that machine learning teams run on. You will join an engineering-led organisation with sites across Europe, where networking and security are treated as core product capabilities.

The role

We are hiring a Network Security Engineer into the core network team. You will turn security requirements into working designs for data center fabrics, backbone links and corporate networks, take them through architecture and security review, and then run what you build. This is a hands-on seat: you will configure, test and troubleshoot firewalls and network devices yourself.

What you will do

• Build and maintain network security designs based on Zero Trust principles across data center and corporate environments
• Implement segmentation (L3/L4, multi-VRF), access policies and secure remote access
• Deploy and validate large-scale protections such as IPS/NDR and DDoS mitigation
• Connect next-generation firewalls to identity providers and keep management, automation and logging in shape for the security organisation
• Operate application-aware inspection, user-based policy, ZTNA and SASE components
• Work with network observability and flow-analysis tooling
• Keep infrastructure healthy and safe through hardening, patching, upgrades and vulnerability follow-up, and confirm that these controls work

Required qualifications

• Solid grasp of core protocols: TCP/IP, DNS, TLS, IPsec, HTTP(S) and dynamic routing
• Working knowledge of service provider and data center networking: EVPN, MPLS L3VPN, MP-BGP, L2VPN
• Real hands-on time with enterprise next-generation firewalls (Palo Alto, Check Point or comparable), including IPS, user-based policy and identity provider integration
• Scripting or automation skills in Python, Go or similar
• Comfortable on Linux/Unix and with multi-vendor networks (Cisco, Juniper, Aruba or similar)

Preferred qualifications

• IPv6 knowledge
• Ansible, Terraform, NetBox or Salt
• Experience with highly available, large-scale environments
• Micro-segmentation and Zero Trust design
• Certifications such as CCNP/CCIE, PCNSE or NSE, and strong English
• Experience with centralised firewall management, SIEM/log analytics and EDR tools
• A plus: DevSecOps, cloud posture tooling, offensive security (OSCP/CPTS), or familiarity with ISO 27001, NIST and GDPR

What we offer

Competitive pay, room to grow, real ownership of your work, an international team and the chance to work on infrastructure that powers AI workloads.