Network Security Engineer

Synopsys Inc; Porto Salvo; Presencial; EUR 70 000 - 110 000; Tempo integral

Resumo da oferta

Synopsys Inc seeks a skilled network security engineer to design, deploy, and secure global infrastructure across data centers, cloud, and enterprise networks. You will automate deployments using Python and Ansible, implement zero trust and SASE solutions, and collaborate with teams to maintain resilient security posture.

You will support security audits, develop standard operating procedures, and stay ahead of evolving cyber threats while ensuring alignment with industry frameworks and best

Qualificações

• Bachelor's degree or equivalent work experience required.
• Proficient in network configuration management and automation tools (Python, Ansible).
• Familiar with Rest API automation and secure coding practices.
• Knowledge of NIST, CIS Benchmark and/or STIG frameworks.

Responsabilidades

• Design, deploy, monitor, and troubleshoot production network infrastructure and services.
• Implement network security standards and access controls following best practices.
• Develop and enforce network security policies and procedures.
• Implement and support campus and data center segmentation policies.
• Utilize automation to standardize deployments and configurations.
• Monitor networks for threats and vulnerabilities and respond to incidents.
• Manage security infrastructure including SASE, firewalls, VPNs, and Zero Trust technologies.
• Create and maintain documentation of network security designs and processes.
• Support and resolve end-user security-related tickets promptly.

Conhecimentos

Network security foundations

Automation mindset

Communication skills

Formação académica

Bachelor's degree or equivalent

Ferramentas

Python

Ansible

REST API automation

Cisco devices

Palo Alto

Zscaler

SASE

NIST/CIS/STIG familiarity

Descrição da oferta de emprego

We Are

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

We Are

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation & analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

You Are

You have spent the last few years building your foundation in network security and you are ready to go deeper. You are the kind of engineer who sees a manual deployment process and immediately starts thinking about how to script it away. Security is not just a compliance checkbox for you, it is the lens through which you evaluate every configuration, every access control, every network segment.

You love solving complex technical problems, automating repetitive tasks, and learning cutting edge tools across cloud, networking, and cybersecurity domains. You will support our global infrastructure, spanning data centers, cloud environments, and secure enterprise networks, while developing automation solutions that enhance speed, consistency, and security.

Your values align with Synopsys' core principles of Integrity, Execution, Excellence, Leadership, and Passion. You are eager to grow and learn, embracing new challenges and opportunities to advance your career in network security.

What You'll Be Doing

• Design, configure, deploy, monitor, and troubleshoot production network infrastructure and associated services
• Implement network security standards and access controls following NIST frameworks
• Develop and implement network security policies and procedures
• Implement and support campus and data center macro and micro-segmentation policies
• Utilize automation tools and scripts to standardize deployment configurations and environments
• Monitor and analyze networks for potential security threats and vulnerabilities
• Manage network security infrastructure including SASE, firewalls, VPNs, and ZTA solutions
• Help maintain and advance Zero Trust Architecture adoption
• Develop and enforce best practice security standards, compliance, and governance
• Conduct external and internal security audits and assessments to identify potential risks and vulnerabilities in the network infrastructure adhering to industry-standard cybersecurity frameworks
• Stay up to date on emerging network security threats and proof of concepts
• Create and maintain documentation of network security designs, processes, and procedures
• Identify and solve problems related to overall security infrastructure performance, efficiency, and availability in a timely manner
• Contribute to network and security support ticketing and provide timely resolution for end user issues

The Impact You Will Have

• Improve reliability and speed of security operations through automation and AI tools
• Enhance Synopsys' network security posture through the implementation of new vendor solutions
• Ensure compliance with network security standards, governance, and industry best practices
• Provide critical support for global remote field offices and data centers, ensuring secure and reliable network connectivity
• Utilize automation to streamline deployment configurations, improving efficiency and consistency
• Support the advancement and maintenance of Zero Trust Architecture, reinforcing Synopsys' security framework
• Contribute to the resolution of network security issues, minimizing downtime and ensuring business continuity

What You'll Need

• 4 + years of experience working on current bleeding edge technology Gartner leaders
• Bachelor's degree or equivalent work experience
• Proficient in network configuration management and automation tools (Python, Ansible)
• Familiar with Rest API automation and configuration management secure coding
• General knowledge of NIST, CIS Benchmark and/or STIG security frameworks
• Experience with MFA, SSO, SAML deployment
• Familiar with Clearpass NAC
• Deep understanding of network security systems and protocols such as IPSec, IKE, GRE, TACACS, RADIUS, 802.1x, OSPF, DMVPN, BGP, SD-WAN
• Experience with configuring and troubleshooting Cisco, Versa, and Aruba devices
• Experience with configuring Palo Alto, Zscaler and SASE solutions
• General knowledge of Frontier AI threat risk and prevention
• Ability to work after hours to support projects and maintenance activities.
• Some knowledge of automation and scripting tools such as Python and Ansible
• Ability to create best practice secure environment diagrams and documentation
• Ability to quickly learn new or unfamiliar technology and products using documentation and internet resources.
• Strong verbal, written interpersonal and communication skills

Bonus Qualifications

• Knowledge on quantum resistant encryption and migration plan
• AI/ML frameworks likeScikitLearn,PyTorch, orAzure ML.
• Cloud experience in GCP, Azure and AWS
• Experience with working in a global team environment and solving problems independently.
• Master's degrees in Network or Computer Engineering, Computer Science, Cybersecurity Who You Are

The Team'll Be Part Of

You will join a global network engineering team responsible for supporting all network services across LAN, WAN, data centers, remote access, wireless, and firewall security. This team manages a footprint of over 12 megawatts of power, 12 colocation data centers, 10 on-premises data centers, and more than 50,000 servers worldwide. The team operates with a focus on integrity, execution excellence, leadership, and a commitment to securing and scaling the infrastructure that powers Synopsys' growth.

Rewards And Benefits

We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings.