Senior Network Security Engineer - Firewall & App Delivery

ITDS; Portugal; Híbrido; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

ITDS in Lisbon is seeking a Senior Network Security Engineer to lead the perimeter and application delivery estate across multiple sites. You will manage F5 BIG-IP, Palo Alto, Check Point, Fortinet and ProxySG platforms, ensuring automated, compliant security solutions.

You will automate configurations via REST APIs, Ansible, and Git, develop hardening baselines, and provide Level 2/3 support with on‑call rotations.

Qualificações

• Minimum of 5 years in perimeter security and application delivery.

Responsabilidades

• Operate and optimize F5 BIG-IP platforms for load balancing and SSL offload.
• Manage Palo Alto, Check Point and Fortinet firewalls with NAT, VPNs, and high availability.
• Administer FortiGate devices ensuring performance and security.
• Oversee ProxySG proxies with SSL inspection and traffic management.
• Maintain Infoblox DDI (DNS/DHCP/IPAM) and secure IP space.
• Manage Azure networking components like ExpressRoute, VNet, Azure Firewall, and VPN Gateway.
• Troubleshoot complex traffic, TLS/SSL, NAT, and routing end-to-end.
• Automate configurations via REST APIs, Ansible, and Git.
• Develop and update hardening baselines, runbooks, and change documentation.
• Provide Level 2/3 support and participate in on‑call rotations.

Conhecimentos

Perimeter security

Application delivery

Web proxies

DNS/DHCP/IPAM

Azure network security

REST APIs scripting

Automation (Ansible)

Scripting

Incident response

Security best practices

Formação académica

Bachelor's degree in CS/networks/related

Ferramentas

F5 BIG-IP

Palo Alto PAN-OS

Check Point

Fortinet FortiGate

ProxySG

Infoblox DDI

Azure networking

REST APIs

Ansible

Git

Descrição da oferta de emprego

ITDS in Lisbon is seeking a Senior Network Security Engineer to lead the perimeter and application delivery estate across multiple sites. You will manage F5 BIG-IP, Palo Alto, Check Point, Fortinet and ProxySG platforms, ensuring automated, compliant security solutions.

You will automate configurations via REST APIs, Ansible, and Git, develop hardening baselines, and provide Level 2/3 support with on‑call rotations.