Network Security Engineer

ITDS; Portugal; Híbrido; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

ITDS in Lisbon is seeking a Senior Network Security Engineer to lead the perimeter and application delivery estate across multiple sites. You will manage F5 BIG-IP, Palo Alto, Check Point, Fortinet and ProxySG platforms, ensuring automated, compliant security solutions.

You will automate configurations via REST APIs, Ansible, and Git, develop hardening baselines, and provide Level 2/3 support with on‑call rotations.

Qualificações

• Minimum of 5 years in perimeter security and application delivery.

Responsabilidades

• Operate and optimize F5 BIG-IP platforms for load balancing and SSL offload.
• Manage Palo Alto, Check Point and Fortinet firewalls with NAT, VPNs, and high availability.
• Administer FortiGate devices ensuring performance and security.
• Oversee ProxySG proxies with SSL inspection and traffic management.
• Maintain Infoblox DDI (DNS/DHCP/IPAM) and secure IP space.
• Manage Azure networking components like ExpressRoute, VNet, Azure Firewall, and VPN Gateway.
• Troubleshoot complex traffic, TLS/SSL, NAT, and routing end-to-end.
• Automate configurations via REST APIs, Ansible, and Git.
• Develop and update hardening baselines, runbooks, and change documentation.
• Provide Level 2/3 support and participate in on‑call rotations.

Conhecimentos

Perimeter security

Application delivery

Web proxies

DNS/DHCP/IPAM

Azure network security

REST APIs scripting

Automation (Ansible)

Scripting

Incident response

Security best practices

Formação académica

Bachelor's degree in CS/networks/related

Ferramentas

F5 BIG-IP

Palo Alto PAN-OS

Check Point

Fortinet FortiGate

ProxySG

Infoblox DDI

Azure networking

REST APIs

Ansible

Git

Descrição da oferta de emprego

Empower security at the forefront — master the art of safeguarding complex network architectures!

Hybrid opportunity based in Lisbon

As a Senior Network Security Engineer – Firewall & Application Delivery Expertise, you will work for our client, a leading financial services organization operating under Swiss banking regulations. You will be responsible for managing and evolving a multi-vendor perimeter and application-delivery security estate across multiple sites and datacenters, ensuring robust, automated, and compliant security solutions. This role offers a unique chance to contribute to enterprise-grade security infrastructure while advancing your expertise within a high-autonomy environment.

Your main responsibilities:

• Operate and enhance F5 BIG-IP platforms, including load balancing, SSL offload, and web application security modules
• Manage next-generation firewalls such as Palo Alto and Check Point, handling NAT, VPNs, and high availability configurations
• Administer Fortinet FortiGate devices within a multi-vendor estate, ensuring optimal performance and security
• Oversee proxy and filtering solutions, including Symantec/Broadcom ProxySG, with a focus on SSL inspection and traffic management
• Maintain Infoblox DDI (DNS, DHCP, IPAM), exemplifying best practices in IP security and zone management
• Manage Azure network connectivity and security components like ExpressRoute, VNet, Azure Firewall, and VPN Gateway
• Troubleshoot complex traffic, TLS/SSL, NAT, and routing issues end-to-end through deep packet analysis
• Automate platform configurations using vendor REST APIs, Ansible, and version control systems (Git)
• Develop and update hardening baselines, runbooks, and change documentation
• Provide escalated support (Level 2/3), partake in on-call rotations, and contribute to a security-first culture

You’re ideal for this role if you have:

• At least 5 years of experience in perimeter security and application delivery
• Strong proficiency with F5 BIG-IP, Palo Alto PAN-OS, Check Point, Fortinet FortiGate, and related security tools
• Hands‑on experience with web proxies, DNS/DHCP/IPAM, and Azure network security
• Expertise in automating network configurations via REST APIs and scripting
• Solid understanding of security best practices, risk mitigation, and incident response
• Bachelor's degree in computer science, networks, or an equivalent field
• Vendor certifications (e.g., Palo Alto PCNSE, Check Point CCSA/CCSE, Fortinet NSE) are valued

It is a strong plus if you have:

• Knowledge of declarative configuration tools like F5 AS3 or Terraform
• Experience with centralized management systems (e.g., Panorama, FortiManager)
• Familiarity with Source‑of‑Truth concepts such as Nautobot or NetBox
• Previous work in a regulated environment, especially in financial services

Eligibility for the role:

• Only candidates with an existing legal right to work in the European Union will be considered for this role.