Network Security Engineer

Comspek International; Wellington; On-site; NZD 90,000 - 120,000; Full time

Benefits offered by this job

Multi-vendor environment

Large-scale networking exposure

Certification support

Meaningful security work

Career growth

Job summary

Comspek International seeks a seasoned network security professional to design and implement secure network architectures across New Zealand. You will drive segmentation, manage firewall platforms, and ensure least-privilege access while monitoring threats and supporting ISO27001 initiatives.

You will collaborate with security, infrastructure and engineering teams to produce clear security artefacts and drive practical security outcomes in complex environments.

Qualifications

• 5+ years in network engineering with a security focus.
• Proven experience managing firewall technologies and security controls.
• Strong understanding of routing, switching and security interactions in enterprise networks.
• Experience with network segmentation and secure access controls.
• Demonstrated ability to interpret and remediate vulnerability assessments and pen-test findings.
• Excellent documentation skills for technical and security artefacts.
• Strong communication with technical and non-technical stakeholders.
• Experience in telecommunications, ISP or managed services is highly regarded.

Responsibilities

• Design and implement secure network architectures and controls.
• Drive network segmentation initiatives with secure domains and zero-trust principles.
• Configure, optimise and maintain firewall and perimeter security platforms.
• Review and manage firewall policies to ensure least-privilege access.
• Monitor and investigate security events, traffic, and threats.
• Support vulnerability remediation and incident response activities.
• Apply security hardening standards across routers, switches, firewalls, and related infra.
• Produce high-quality security designs and architecture artefacts.
• Contribute to security standards, policies and design principles.
• Support ISO27001 maturity programme with security teams.

Skills

Security

Firewall management

Routing & Switching

Vulnerability remediation

Documentation

Stakeholder communication

ISO27001 familiarity

Tools

Firewall platforms

Job description

Join a team responsible for securing critical network infrastructure that supports essential communications services across New Zealand. Working at the intersection of networking and cybersecurity, you'll help strengthen and protect complex environments while contributing to a major security and compliance uplift. You'll work closely with security, infrastructure and engineering teams to deliver practical security outcomes and continuously improve the organisation's security posture.

What You'll Be Doing

• Design and implement secure network architectures and security controls.
• Drive network segmentation initiatives, including secure domains, inter-zone access controls and zero-trust principles.
• Configure, optimise and maintain firewall and perimeter security platforms.
• Review, rationalise and manage firewall policies, ensuring least-privilege access across all environments.
• Monitor and investigate security events, anomalous traffic and potential threats.
• Support vulnerability remediation and contribute to security incident response activities.
• Apply and maintain security hardening standards across routers, switches, firewalls and related network infrastructure.
• Produce high-quality technical documentation, security designs and architecture artefacts.
• Contribute to security standards, technical policies and design principles.
• Work alongside security teams to support an organisation-wide ISO27001 maturity programme.

What You'll Bring

• 5+ years' experience in network engineering with a strong focus on security.
• Proven experience managing firewall technologies and network security controls.
• Strong understanding of routing, switching and how security controls interact with enterprise networks.
• Experience with network segmentation, secure access controls and modern security architectures.
• Demonstrated capability interpreting and remediating vulnerability assessments and penetration test findings.
• Excellent documentation skills with the ability to create clear technical and security artefacts.
• Strong communication skills and the ability to work effectively with both technical and non-technical stakeholders.
• Experience within telecommunications, ISP or managed services environments will be highly regarded.

What's On Offer

• A complex, multi-vendor environment where no two days are the same.
• Exposure to large-scale networking and security technologies.
• Professional development and certification support.
• The opportunity to work on security initiatives that genuinely matter.
• A collaborative and experienced team environment with strong career growth opportunities.

Kia ora, Comspek and our clients fully support and encourage diverse hiring and inclusive recruitment processes. Don’t meet every single requirement of this job description? That’s ok - You do not need to tick every box or have expertise in the full JD. Comspek is dedicated to building diverse, inclusive and authentic workplaces based on different clients’ needs.