Manager - Firewall and VPN Engineering

Grant Thornton International; Województwo wielkopolskie; Híbrido; PLN 320.000 - 520.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work

Private medical care

MultiSport

International environment

Onboarding program

Poznań office

Descripción de la vacante

Grant Thornton International is seeking a Manager for Firewall and VPN Engineering to lead a distributed security engineering team across regions. You will own the platform roadmap, govern change, and coordinate investigations while ensuring audit readiness and strong control coverage.

The role requires hands-on ownership with people leadership, architecture alignment, and collaboration with cloud, network, and application teams.

Formación

• Must have leadership experience managing firewall/VPN engineers.
• Strong governance and change-management capability.
• Experience with multi-cloud networking and policy automation is a plus.
• Excellent English writing and verbal communication.

Responsabilidades

• Lead a distributed team of firewall and VPN engineers with performance feedback.
• Own platform roadmap including lifecycle, capacity, HA, and policy management.
• Govern rule bases with change procedures and periodic recertification.
• Coordinate incident response with cross-functional teams.
• Report SLAs, control effectiveness, and remediation progress to security leadership.
• Participate in audit responses and client assessments.

Conocimientos

People leadership

Team development

Communication

Polish language

English proficiency

Educación

PCNSE

NSE 7

CCNP Security

CISSP

Herramientas

Palo Alto Networks

Fortinet

Check Point

Cisco Firewalls

Descripción del empleo

The Manager for Firewall and VPN Engineering leads the team responsible for the network security perimeter: next-generation firewalls, remote access and site-to-site VPN, and the policy governing traffic between segments, data centers, and cloud environments. The role combines people leadership with hands-on technical ownership. The manager sets standards for rule quality and change discipline, plans the technology roadmap with architecture and network engineering, and is accountable for the availability and audit readiness of the platforms the team runs.

Key Responsibilities

• Lead a distributed team of firewall and VPN engineers, including work allocation, on-call coverage, performance feedback, and technical development.
• Own the firewall and VPN platform roadmap: hardware and software lifecycle, capacity, high availability design, and migration to centralized policy management.
• Govern the rule base through a documented change and review process, drive periodic recertification, and reduce shadowed, permissive, and unused rules on a measured schedule.
• Serve as escalation owner for major network security incidents and outages, and coordinate with network engineering, cloud, and application teams on resolution.
• Report on control effectiveness, service levels, and remediation progress to security leadership, and respond to internal audit and client assessment requests.

Working Arrangements and Team Expectations

This role sits within the Information Security Platform Engineering function and shares a common operating model with the wider team. Engineers own the security platforms they build end to end: design, deployment, day-to-day operation, tuning, and lifecycle management. Work is delivered against agreed service levels and measured on control coverage, platform availability, and the quality of detection and prevention outcomes. Because the teams are distributed across LATAM, EMEA, and North America, all roles require reliable overlap with United States business hours and fluent written and spoken English.

Operate assigned security platforms as a service, including capacity planning, patching, upgrades, health monitoring, and vendor case management.

Automate repetitive configuration and operational tasks, and treat platform configuration as code wherever the tooling supports it.

Support incident response and forensic investigations with platform expertise , evidence, and rapid containment actions.

Maintain runbooks, architecture diagrams, and control documentation to a standard that satisfies internal audit and external assessment.

Participate in an on-call rotation and in scheduled change windows, including occasional work outside standard business hours.

Eight or more years in network or network security engineering, including at least two years leading engineers as a manager or team lead .

Expert-level experience with enterprise firewall platforms such as Palo Alto Networks, Fortinet, Check Point, or Cisco, together with centralized policy management.

Strong command of remote access and site-to-site VPN technologies, including IPsec, SSL VPN, and modern zero trust network access approaches.

Demonstrated experience running firewall change governance and rule recertification in an audited environment.

• Fluency in Polish and English

Preferred Qualifications

Certification such as PCNSE, NSE 7 or above, CCNP Security, or CISSP.

Experience securing hybrid and multi-cloud network architectures and automating policy deployment through infrastructure as code.

What we offer:

• Hybrid working model (2 days in the office and 3 days working remotely)
• Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform
• Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world
• A culture based on teamwork, trust, and knowledge sharing
• A well-structured onboarding program to support a smooth start and successful integration into your new role
• Clear career development paths and access to learning and certification programs
• Access to training platforms and tools that support professional growth
• An inclusive workplace that welcomes people with disabilities
• A modern office in Poznań, located in Malta Office Park