Network Security Engineer (Consultancy Setup)

Sysgen RPO, Inc.; Taguig; Hybrid; PHP 900,000 - 1,300,000; Full time

Job summary

Sysgen RPO, Inc. in Bonifacio Global City, Taguig, is seeking a Network Security Engineer for a hybrid role (3 days onsite, 2 days WFH) to manage and secure our network infrastructure.

You will configure Palo Alto firewalls, ACLs, and cloud-network security across GCP, AWS, and Azure, while troubleshooting incidents within SLAs and coordinating with security and cloud teams.

Qualifications

• Hands-on experience with day-to-day network operations and troubleshooting.
• Strong ACL configuration and management.
• Working knowledge of Palo Alto Networks firewalls.
• Experience with GCP, AWS, and Azure networking or security controls.
• Knowledge of TCP/IP, routing, VPNs, NAT, and network security.
• Certifications such as PCNSA/PCNSE or CCNA/CCNP.
• Experience in multi-cloud, hybrid environments.
• Familiarity with ITSM tools like ServiceNow.

Responsibilities

• Manage and monitor day-to-day network operations, ensuring uptime and performance.
• Create, modify, and maintain ACLs across firewalls and devices.
• Troubleshoot incidents and drive resolution within SLA.
• Configure and optimize Palo Alto firewalls (policies, NAT, App-ID/User-ID).
• Manage firewall configurations in GCP (VPC, Cloud Armor).
• Manage AWS network security (SGs, NACLs, Firewall/WAF).
• Manage Azure network security (NSGs, Azure Firewall).
• Perform change management, documentation, and audit support for firewall rules.
• Respond to escalated tickets related to network/firewall access and outages.
• Collaborate with security, cloud, and application teams to align rules with requirements.
• Participate in on-call rotation for critical incidents (if applicable).

Skills

Network operations

ACL management

TCP/IP & VPNs

Incident troubleshooting

On-call support

Security policy alignment

Ticketing/ITSM familiarity

PCNSA/PCNSE

CCNA/CCNP

Education

Tools

Palo Alto Networks Firewall

GCP Networking

AWS Networking

Azure Networking

ServiceNow

Job description

Location: Bonifacio Global City, Taguig, Metro Manila 1634, Philippines

Work Arrangement: Hybrid — 3 days onsite, 2 days work-from-home

Working Schedule: 8:00 AM to 5:00 PM, from Monday to Friday

About the role

The Network Security Engineer is responsible for the day-to-day operation, monitoring, and troubleshooting of the organization's network and security infrastructure, with a strong focus on firewall management across on-premises and multi-cloud environments (GCP, AWS, Azure). This role ensures network availability, security policy compliance, and rapid resolution of connectivity and access issues.

Key responsibilities

• Manage and monitor day-to-day network operations, ensuring uptime, performance, and reliability of network infrastructure.

• Create, modify, and maintain Access Control Lists (ACLs) across firewalls and network devices to enforce security policies.

• Troubleshoot network and firewall-related incidents (connectivity, latency, routing, access issues) and drive them to resolution within SLA.

• Configure, maintain, and optimize Palo Alto Networks firewalls (policies, NAT rules, security profiles, App-ID/User-ID as applicable).

• Manage firewall and security group configurations within GCP (VPC firewall rules, Cloud Armor as applicable).

• Manage AWS network security (Security Groups, NACLs, AWS Network Firewall/WAF as applicable).

• Manage Azure network security (NSGs, Azure Firewall, firewall policies).

• Perform change management, documentation, and audit support for firewall rule sets across all platforms.

• Respond to and resolve escalated tickets related to network/firewall access, performance, and outages.

• Collaborate with security, cloud, and application teams to align firewall rules with business and compliance requirements.

• Participate in on-call rotation for critical network/firewall incidents (if applicable).

Required Skills & Experience

• Hands-on experience with day-to-day network operations and troubleshooting.

• Strong knowledge of ACL configuration and management.

• Working knowledge of Palo Alto Networks firewalls.

• Working knowledge of firewall/security controls in GCP, AWS, and Azure.

• Understanding of TCP/IP, routing, VPNs, NAT, and general network security principles.

• Strong analytical and problem-solving skills for incident troubleshooting.

• Relevant certifications (PCNSA/PCNSE, AWS/Azure/GCP networking or security certs, CCNA/CCNP).

• Experience working in a multi-cloud, hybrid environment.

• Familiarity with ticketing/ITSM tools (e.g., ServiceNow) for incident and change management

Preferred Qualifications (Nice to Have)

• Experience administering and maintaining Illumio for micro-segmentation and workload-level security policy enforcement, including:

• Building and visualizing application dependency maps for segmentation planning.

• Designing and enforcing workload-level (host-based) security policies across hybrid/cloud environments.

• Supporting zero-trust segmentation initiatives to limit lateral movement risk.