Network & Security Specialist

Aydınlı Haz.Gıy. A.S.; Sarıyer; On-site; TRY 320,000 - 520,000; Full time

Job summary

Aydınlı Group is seeking a seasoned Network Security Engineer to lead and optimize the company's enterprise network and security infrastructure in Türkiye.

You will manage LAN/WAN, firewall platforms (Palo Alto, Check Point, Fortinet), SIEM (QRadar), EDR, WAF, load balancers, and monitoring tools, coordinating with vendors and internal teams to ensure uptime, security, and compliant operations.

Qualifications

• Bachelor's degree in a related field is required.
• 5+ years of experience in enterprise networking and cybersecurity.
• Strong knowledge of LAN, WAN, WLAN, TCP/IP, routing, switching, VLAN, STP, LACP, MPLS, VPN, IPsec.
• Hands-on experience with Palo Alto, Check Point, or Fortinet firewalls.
• Experience with Aruba, Cisco, HPE, or Dell switching solutions.
• Knowledge of 802.1X, RADIUS, and NAC technologies.
• Experience with IBM QRadar or similar SIEM.
• Understanding of EDR, vulnerability management, WAF, and threat intelligence solutions.
• Strong troubleshooting and analytical skills; ability to communicate with vendors.

Responsibilities

• Manage and optimize enterprise network infrastructure (LAN/WAN/WLAN, VPN, MPLS, cloud networking).
• Configure and troubleshoot routing, switching, VLANs, STP, LACP, BGP, OSPF.
• Administer security platforms: Firewalls, IDS/IPS, WAF, EDR, SIEM, NAC, DNS security, PAM.
• Configure security policies on Palo Alto, Check Point, Fortinet; NAT, VPN, HA, Threat Prevention.
• Manage switching infra (Aruba, Cisco, HPE, Dell); ClearPass, AirWave, and wireless environments.
• Support load balancers: F5, Kemp, Citrix; monitor and optimize performance.
• Administer IBM QRadar SIEM logs, rules, alerts, and reports.
• Monitor incidents, coordinate remediation with stakeholders; conduct vulnerability remediation.
• Maintain CTI feeds and external attack surface monitoring; respond to threats.

Skills

Networking

Cybersecurity

Firewall management

SIEM

EDR

WAF

Load balancers

Monitoring

Vendor coordination

Cloud networking

Education

Bachelor's degree in Computer Engineering

Bachelor's degree in Electrical & Electronics Engineering

Bachelor's degree in Telecommunications Engineering

Bachelor's degree in Management Information Systems

Tools

Palo Alto

Check Point

Fortinet

Aruba ClearPass

IBM QRadar

SentinelOne

Microsoft Defender

F5

Kemp

Citrix

Wireshark

Nmap

PRTG

NetFlow

Job description

As the master license holder of the globally renowned Pierre Cardin, Cacharel, and U.S. Polo Assn. brands, Aydınlı Group is one of Türkiye’s leading fashion retail companies, employing more than 5,000 people and operating 682 retail stores, including 400 in Türkiye and 282 internationally. The company also exports to more than 60 countries worldwide.

Would you like to become part of Aydınlı Group—an industry-leading organization committed to delivering high-quality service, embracing universal values, promoting environmentally responsible production, and operating with a customer-centric approach in line with global standards while showcasing the strength of Turkish design and manufacturing to the world?

JOB DESCRIPTION

• Manage, maintain, and continuously improve the company's enterprise network infrastructure, including LAN, WAN, WLAN, VPN, MPLS, and cloud networking environments.
• Administer and troubleshoot routing and switching technologies, including TCP/IP, VLAN, STP, LACP, VRRP, VLT, BGP, OSPF, GRE, and IPsec.
• Manage enterprise security solutions such as Firewalls, IDS/IPS, WAF, EDR, SIEM, NAC, DNS Security, and PAM.
• Configure, maintain, and optimize Palo Alto, Check Point, and Fortinet security platforms, including security policies, NAT, VPN, High Availability, and Threat Prevention.
• Install, configure, and support Aruba, Cisco, HPE, and Dell switching infrastructures, as well as Aruba Controller, ClearPass, AirWave, and enterprise wireless environments.
• Support the administration of F5, Kemp, and Citrix Load Balancer solutions.
• Manage IBM QRadar SIEM by administering log sources, correlation rules, alerts, and reporting processes.
• Monitor, investigate, and respond to security incidents while coordinating remediation activities with relevant stakeholders.
• Analyze vulnerability assessment results, coordinate remediation plans, and monitor improvement activities.
• Administer endpoint security solutions such as SentinelOne, Microsoft Defender, or equivalent EDR platforms.
• Support Microsoft 365 security, identity, access management, DNS, DHCP, Active Directory, and core Microsoft infrastructure services.
• Monitor network availability, performance, and capacity using PRTG, Syslog, SNMP, NetFlow, and similar monitoring solutions.
• Perform network troubleshooting, root cause analysis, and implement permanent solutions for infrastructure issues.
• Ensure compliance with corporate information security policies, standards, and operational procedures while contributing to their continuous improvement.
• Monitor Cyber Threat Intelligence (CTI) platforms for threat intelligence, brand abuse, leaked credentials, dark web findings, and external attack surface exposure, coordinating appropriate response actions.
• Manage the lifecycle of SSL/TLS certificates, including issuance, renewal, deployment, inventory management, and service continuity.
• Prepare network topology, infrastructure inventory, capacity, performance, and security reports.
• Collaborate closely with internal teams, business units, technology vendors, and external service providers.
• Ensure the security, availability, and operational continuity of critical enterprise systems.
• Participate in on-call and 24/7 operational support when required.

QUALIFICATIONS

• Bachelor's degree in Computer Engineering, Electrical & Electronics Engineering, Telecommunications Engineering, Management Information Systems, or a related field.
• Minimum 5years of experience managing enterprise network and cybersecurity infrastructures.
• Strong knowledge of LAN, WAN, WLAN, TCP/IP, routing, switching, VLAN, STP, LACP, MPLS, VPN, and IPsec technologies.
• Hands-on experience managing at least one enterprise firewall platform such as Palo Alto, Check Point, or Fortinet.
• Experience with Aruba, Cisco, HPE, or Dell switching solutions.
• Knowledge of enterprise wireless networking, including 802.1X, RADIUS, and NAC technologies.
• Experience with Aruba ClearPass, Aruba Controller, and/or AirWave solutions.
• Familiarity with IBM QRadar or similar SIEM platforms, including log management, alert investigation, and correlation rules.
• Understanding of EDR, endpoint protection, vulnerability management, WAF, PAM, and cyber threat intelligence solutions.
• Knowledge of F5, Kemp, or Citrix Load Balancer technologies.
• Familiarity with CTI and External Attack Surface Management platforms such as SOC Radar, Brandefense, or similar solutions.
• Experience using monitoring technologies such as PRTG, Syslog, SNMP, NetFlow, Zabbix, or ManageEngine.
• Knowledge of dynamic routing protocols such as BGP and OSPF.
• Experience using network diagnostic and packet analysis tools such as Wireshark and Nmap.
• Strong troubleshooting, analytical thinking, root cause analysis, and problem-solving skills.
• Ability to evaluate cybersecurity risks and recommend appropriate technical controls.
• Good command of English, with the ability to understand technical documentation and communicate with technology vendors.
• Strong communication skills, a collaborative mindset, and the ability to work effectively in a dynamic environment.
• No restrictions on domestic or international travel.

PREFERRED QUALIFICATIONS

• CCNA and/or CCNP certification.
• Palo Alto Networks training or professional certifications.
• CEH (Certified Ethical Hacker) or equivalent cybersecurity certifications.
• Experience with ISO 27001 Information Security Management System.
• Knowledge of PCI DSS compliance requirements.
• Experience with Microsoft Azure Networking and Security services.
• Experience automating operational processes using PowerShell, Python, or similar scripting languages.
• Experience with Microsoft Defender for Cloud.
• Experience with Azure Monitor and Log Analytics.
• Familiarity with ITIL processes and IT service management best practices.