Senior Network Security Engineer — Zero Trust & Fortinet Architect

Stafide; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Stafide is seeking a Senior Network Security Engineer to design and manage secure WAN architectures and enterprise perimeter security in Amsterdam. You will manage Fortinet firewalls, implement Zero Trust, and oversee security automation and integrations with SIEM/ITSM/CMDB platforms.

Require 6–8 years in network security with hands-on Fortinet expertise and experience across MPLS, DIA, SD-WAN, and secure remote access.

Qualifications

• : 6-8 years of experience in network security, firewall administration, or WAN security engineering.
• Strong hands-on expertise in Fortinet firewalls and enterprise perimeter security.
• Experience with MPLS, DIA, SD-WAN, cloud connectivity, VPNs, and firewall migrations.
• Strong knowledge of Zero Trust, network segmentation, security policies, and threat prevention.
• Understanding of SIEM, ITSM, CMDB, security automation, and Network-as-Code practices.
• Excellent troubleshooting, incident management, communication, and root cause analysis skills.

Responsibilities

• Design secure WAN and perimeter architectures aligned with enterprise requirements.
• Lead firewall implementations, migrations, security reviews, and incident resolution.
• Automate security operations and collaborate with network, cloud, and cybersecurity teams.

Skills

Network security

Fortinet

Firewall admin

WAN security

Zero Trust

SIEM

ITSM

CMDB

Threat prevention

Incident management

Troubleshooting

Tools

Fortinet firewalls

VPNs

SIEM tools

CMDB tools

Job description

Stafide is seeking a Senior Network Security Engineer to design and manage secure WAN architectures and enterprise perimeter security in Amsterdam. You will manage Fortinet firewalls, implement Zero Trust, and oversee security automation and integrations with SIEM/ITSM/CMDB platforms.

Require 6–8 years in network security with hands-on Fortinet expertise and experience across MPLS, DIA, SD-WAN, and secure remote access.