Network Security Engineer

SYSGEN RPO; Taguig; Hybrid; PHP 600,000 - 1,200,000; Full time

Job summary

SYSGEN RPO is seeking a Network Security Engineer to oversee day-to-day network operations and security for on-prem and multi-cloud environments (GCP, AWS, Azure). You will ensure network availability, enforce security policies, and rapidly resolve connectivity issues.

Key duties include configuring ACLs, managing Palo Alto firewalls, and aligning firewall rules with compliance requirements. This role operates in a hybrid setup with onsite and remote work, following standard business hours.

Qualifications

• Hands-on experience with day-to-day network operations.
• Strong knowledge of ACL configuration and management.
• Experience with Palo Alto firewalls in multi-cloud environments.
• Familiarity with firewall controls in GCP, AWS, and Azure.
• Understanding of TCP/IP, routing, VPNs, and security principles.
• Relevant certifications (PCNSA/PCNSE, CCNA/CCNP) and cloud networking certs.
• Experience in a hybrid/multi-cloud environment.
• Familiarity with ITSM tools (e.g., ServiceNow) for incident/change mgmt.

Responsibilities

• Manage day-to-day network operations for uptime and performance.
• Create and maintain ACLs across firewalls and devices.
• Troubleshoot network and firewall incidents and resolve within SLA.
• Configure and optimize Palo Alto firewalls (policies, NAT, security profiles).
• Manage firewall rules in GCP (VPC, Cloud Armor).
• Manage AWS network security (Security Groups, NACLs, WAF).
• Manage Azure network security (NSGs, Azure Firewall).
• Perform change management, documentation, and audit support for firewall rules.

Skills

Network operations

ACL configuration

Palo Alto firewalls

Multi-cloud

Incident troubleshooting

ITSM tooling

On-call rotation

VPNs

TCP/IP knowledge

Education

Networking certifications (PCNSA/PCNSE, CCNA/CCNP)

Tools

Palo Alto Firewalls

GCP

AWS

Azure Firewall

Illumio

Job description

Work Arrangement:

Hybrid — 3 days onsite, 2 days work-from-home

Working Schedule

8:00 AM to 5:00 PM, from Monday to Friday

Job Summary

The Network Security Engineer is responsible for the day-to-day operation, monitoring, and troubleshooting of the organization's network and security infrastructure, with a strong focus on firewall management across on-premises and multi-cloud environments (GCP, AWS, Azure). This role ensures network availability, security policy compliance, and rapid resolution of connectivity and access issues.

Key Responsibilities

• Manage and monitor day-to-day network operations, ensuring uptime, performance, and reliability of network infrastructure.
• Create, modify, and maintain Access Control Lists (ACLs) across firewalls and network devices to enforce security policies.
• Troubleshoot network and firewall-related incidents (connectivity, latency, routing, access issues) and drive them to resolution within SLA.
• Configure, maintain, and optimize Palo Alto Networks firewalls (policies, NAT rules, security profiles, App-ID/User-ID as applicable).
• Manage firewall and security group configurations within GCP (VPC firewall rules, Cloud Armor as applicable).
• Manage AWS network security (Security Groups, NACLs, AWS Network Firewall/WAF as applicable).
• Manage Azure network security (NSGs, Azure Firewall, firewall policies).
• Perform change management, documentation, and audit support for firewall rule sets across all platforms.
• Respond to and resolve escalated tickets related to network/firewall access, performance, and outages.
• Collaborate with security, cloud, and application teams to align firewall rules with business and compliance requirements.
• Participate in on-call rotation for critical network/firewall incidents (if applicable).

Required Skills & Experience

• Hands-on experience with day-to-day network operations and troubleshooting.
• Strong knowledge of ACL configuration and management.
• Working knowledge of Palo Alto Networks firewalls.
• Working knowledge of firewall/security controls in GCP, AWS, and Azure.
• Understanding of TCP/IP, routing, VPNs, NAT, and general network security principles.
• Strong analytical and problem-solving skills for incident troubleshooting.
• Relevant certifications (PCNSA/PCNSE, AWS/Azure/GCP networking or security certs, CCNA/CCNP).
• Experience working in a multi-cloud, hybrid environment.
• Familiarity with ticketing/ITSM tools (e.g., ServiceNow) for incident and change management.

Preferred Qualifications (Nice to Have)

• Experience administering and maintaining Illumio for micro-segmentation and workload-level security policy enforcement, including:
• Building and visualizing application dependency maps for segmentation planning.
• Designing and enforcing workload-level (host-based) security policies across hybrid/cloud environments.
• Supporting zero-trust segmentation initiatives to limit lateral movement risk.