Network Security Engineer

Sysgen RPO, Inc.; Philippines; Hybrid; PHP 600,000 - 1,000,000; Full time

Job summary

Sysgen RPO, Inc. in the Philippines seeks a Network Security Engineer to oversee day-to-day network operations, monitor security infrastructure, and troubleshoot firewall issues across on-prem and multi-cloud environments (GCP, AWS, Azure).

This hybrid role requires strong ACL skills, Palo Alto experience, and cloud firewall management across GCP, AWS, and Azure, with collaboration across security and cloud teams.

Qualifications

• Hands-on experience with daily network operations and troubleshooting.
• Strong ACL configuration and management skills.
• Experience with Palo Alto Networks firewalls.
• Knowledge of firewall controls in GCP, AWS, and Azure.
• Solid understanding of TCP/IP, routing, VPNs, NAT, and network security.
• Analytical, with effective incident troubleshooting abilities.
• Relevant certifications (PCNSA/PCNSE, CCNA/CCNP, cloud networking certs).
• Experience in multi-cloud, hybrid environments.

Responsibilities

• Manage and monitor day-to-day network operations for uptime and performance.
• Create, modify, and maintain ACLs across firewalls and devices.
• Troubleshoot network and firewall incidents and resolve within SLA.
• Configure and optimize Palo Alto firewalls (policies, NAT, security profiles).
• Manage firewall configurations in GCP (VPC firewall, Cloud Armor).
• Manage AWS network security (Security Groups, NACLs, Network Firewall/WAF).
• Manage Azure network security (NSGs, Azure Firewall, firewall policies).
• Perform change management, documentation, and audit support for firewall rule sets.
• Respond to escalated tickets related to network/firewall access and outages.
• Collaborate with security, cloud, and application teams on firewall rules.
• Participate in on-call rotation for critical incidents.

Skills

Network operations

ACL management

Palo Alto

Multi-cloud security

TCP/IP & routing

Troubleshooting

Incident response

On-call support

Education

PCNSA/PCNSE

CCNA/CCNP

AWS/Azure/GCP certs

Tools

Palo Alto firewalls

GCP firewall controls

AWS Network Firewall/WAF

Azure firewall controls

Illumio

ServiceNow

Job description

Location:Bonifacio Global City, Taguig, Metro Manila 1634, Philippines

Work Arrangement:Hybrid — 3 days onsite, 2 days work-from-home

Working Schedule: 8:00 AM to 5:00 PM, from Monday to Friday

About the role

The Network Security Engineer is responsible for the day-to-day operation, monitoring, and troubleshooting of the organization's network and security infrastructure, with a strong focus on firewall management across on-premises and multi-cloud environments (GCP, AWS, Azure). This role ensures network availability, security policy compliance, and rapid resolution of connectivity and access issues.

Key responsibilities

• Manage and monitor day-to-day network operations, ensuring uptime, performance, and reliability of network infrastructure.
• Create, modify, and maintain Access Control Lists (ACLs) across firewalls and network devices to enforce security policies.
• Troubleshoot network and firewall-related incidents (connectivity, latency, routing, access issues) and drive them to resolution within SLA.
• Configure, maintain, and optimize Palo Alto Networks firewalls (policies, NAT rules, security profiles, App-ID/User-ID as applicable).
• Manage firewall and security group configurations within GCP (VPC firewall rules, Cloud Armor as applicable).
• Manage AWS network security (Security Groups, NACLs, AWS Network Firewall/WAF as applicable).
• Manage Azure network security (NSGs, Azure Firewall, firewall policies).
• Perform change management, documentation, and audit support for firewall rule sets across all platforms.
• Respond to and resolve escalated tickets related to network/firewall access, performance, and outages.
• Collaborate with security, cloud, and application teams to align firewall rules with business and compliance requirements.
• Participate in on-call rotation for critical network/firewall incidents (if applicable).

Required Skills & Experience

• Hands-on experience with day-to-day network operations and troubleshooting.
• Strong knowledge of ACL configuration and management.
• Working knowledge of Palo Alto Networks firewalls.
• Working knowledge of firewall/security controls in GCP, AWS, and Azure.
• Understanding of TCP/IP, routing, VPNs, NAT, and general network security principles.
• Strong analytical and problem-solving skills for incident troubleshooting.
• Relevant certifications (PCNSA/PCNSE, AWS/Azure/GCP networking or security certs, CCNA/CCNP).
• Experience working in a multi-cloud, hybrid environment.
• Familiarity with ticketing/ITSM tools (e.g., ServiceNow) for incident and change management

Preferred Qualifications (Nice to Have)

• Experience administering and maintaining Illumio for micro-segmentation and workload-level security policy enforcement, including:
• Building and visualizing application dependency maps for segmentation planning.
• Designing and enforcing workload-level (host-based) security policies across hybrid/cloud environments.
• Supporting zero-trust segmentation initiatives to limit lateral movement risk.