Network & Security Specialist

Aydınlı Haz.Gıy. A.S.; Sarıyer; On-site; TRY 550,000 - 900,000; Full time

Job summary

Aydınlı Group is seeking an experienced Network & Security Engineer to manage and advance its enterprise network and security infrastructure in Marmara region. You will handle LAN/WAN/WLAN, VPNs, MPLS, and cloud networks while configuring Palo Alto, Check Point, and Fortinet devices.

The role requires hands-on firewall, SIEM, EDR, WAF, and CTI expertise, as well as strong 802.1X/WLAN knowledge and proactive threat response.

Qualifications

• Bachelor's degree in engineering or MIS is required.
• Minimum 5 years of experience in enterprise network and cybersecurity.
• Strong knowledge of LAN, WAN, VPN, IPsec, routing, and switching.
• Hands-on experience with at least one enterprise firewall platform (Palo Alto, Check Point, or Fortinet).
• Experience with Aruba, Cisco, HPE, or Dell switching.
• Knowledge of enterprise wireless networking (802.1X, RADIUS, NAC).
• Familiarity with QRadar or similar SIEM, log management, and alerts.
• Understanding of EDR, vulnerability management, WAF, PAM, and cyber threat intelligence.

Responsibilities

• Manage and improve the company’s network infrastructure (LAN/WAN/WLAN, VPN, MPLS, cloud).
• Troubleshoot routing, switching, IPsec, and TCP/IP issues.
• Administer security platforms (firewalls, WAF, EDR, SIEM, NAC, DNS security, PAM).
• Configure Palo Alto, Check Point, and Fortinet devices; maintain NAT, VPN, HA, and threat prevention.
• Support Aruba, Cisco, HPE, and Dell switches; manage Aruba ClearPass and AirWave.
• Oversee IBM QRadar SIEM including logs, alerts, and correlation rules.
• Monitor CTI platforms for threats and respond with remediation actions.
• Lead vulnerability management; monitor and improve results; coordinate with teams.
• Support Microsoft 365 security, AD, DNS/DHCP, and related services.
• Ensure 24/7 on-call support and operational continuity.

Skills

LAN/WAN

Routing & Switching

BGP/OSPF

Firewall platforms

SIEM/EDR

Wireless networking

Network monitoring

CTI & threat intel

English communication

Troubleshooting

Team collaboration

Education

Bachelor's degree in Engineering or MIS

Tools

Palo Alto

Check Point

Fortinet

Aruba ClearPass

AirWave

IBM QRadar

SentinelOne

Microsoft Defender

Azure Security

Job description

As the master license holder of the globally renowned Pierre Cardin, Cacharel, and U.S. Polo Assn. brands, Aydınlı Group is one of Türkiye’s leading fashion retail companies, employing more than 5,000 people and operating 682 retail stores, including 400 in Türkiye and 282 internationally. The company also exports to more than 60 countries worldwide.

Would you like to become part of Aydınlı Group—an industry-leading organization committed to delivering high-quality service, embracing universal values, promoting environmentally responsible production, and operating with a customer‑centric approach in line with global standards while showcasing the strength of Turkish design and manufacturing to the world?

JOB DESCRIPTION

• Manage, maintain, and continuously improve the company's enterprise network infrastructure, including LAN, WAN, WLAN, VPN, MPLS, and cloud networking environments.
• Administer and troubleshoot routing and switching technologies, including TCP/IP, VLAN, STP, LACP, VRRP, VLT, BGP, OSPF, GRE, and IPsec.
• Manage enterprise security solutions such as Firewalls, IDS/IPS, WAF, EDR, SIEM, NAC, DNS Security, and PAM.
• Configure, maintain, and optimize Palo Alto, Check Point, and Fortinet security platforms, including security policies, NAT, VPN, High Availability, and Threat Prevention.
• Install, configure, and support Aruba, Cisco, HPE, and Dell switching infrastructures, as well as Aruba Controller, ClearPass, AirWave, and enterprise wireless environments.
• Support the administration of F5, Kemp, and Citrix Load Balancer solutions.
• Manage IBM QRadar SIEM by administering log sources, correlation rules, alerts, and reporting processes.
• Monitor, investigate, and respond to security incidents while coordinating remediation activities with relevant stakeholders.
• Analyze vulnerability assessment results, coordinate remediation plans, and monitor improvement activities.
• Administer endpoint security solutions such as SentinelOne, Microsoft Defender, or equivalent EDR platforms.
• Support Microsoft 365 security, identity, access management, DNS, DHCP, Active Directory, and core Microsoft infrastructure services.
• Monitor network availability, performance, and capacity using PRTG, Syslog, SNMP, NetFlow, and similar monitoring solutions.
• Perform network troubleshooting, root cause analysis, and implement permanent solutions for infrastructure issues.
• Ensure compliance with corporate information security policies, standards, and operational procedures while contributing to their continuous improvement.
• Monitor Cyber Threat Intelligence (CTI) platforms for threat intelligence, brand abuse, leaked credentials, dark web findings, and external attack surface exposure, coordinating appropriate response actions.
• Manage the lifecycle of SSL/TLS certificates, including issuance, renewal, deployment, inventory management, and service continuity.
• Prepare network topology, infrastructure inventory, capacity, performance, and security reports.
• Collaborate closely with internal teams, business units, technology vendors, and external service providers.
• Ensure the security, availability, and operational continuity of critical enterprise systems.
• Participate in on-call and 24/7 operational support when required.

QUALIFICATIONS

• Bachelor's degree in Computer Engineering, Electrical & Electronics Engineering, Telecommunications Engineering, Management Information Systems, or a related field.
• Minimum 5years of experience managing enterprise network and cybersecurity infrastructures.
• Strong knowledge of LAN, WAN, WLAN, TCP/IP, routing, switching, VLAN, STP, LACP, MPLS, VPN, and IPsec technologies.
• Hands‑on experience managing at least one enterprise firewall platform such as Palo Alto, Check Point, or Fortinet.
• Experience with Aruba, Cisco, HPE, or Dell switching solutions.
• Knowledge of enterprise wireless networking, including 802.1X, RADIUS, and NAC technologies.
• Experience with Aruba ClearPass, Aruba Controller, and/or AirWave solutions.
• Familiarity with IBM QRadar or similar SIEM platforms, including log management, alert investigation, and correlation rules.
• Understanding of EDR, endpoint protection, vulnerability management, WAF, PAM, and cyber threat intelligence solutions.
• Knowledge of F5, Kemp, or Citrix Load Balancer technologies.
• Familiarity with CTI and External Attack Surface Management platforms such as SOC Radar, Brandefense, or similar solutions.
• Experience using monitoring technologies such as PRTG, Syslog, SNMP, NetFlow, Zabbix, or ManageEngine.
• Knowledge of dynamic routing protocols such as BGP and OSPF.
• Experience using network diagnostic and packet analysis tools such as Wireshark and Nmap.
• Strong troubleshooting, analytical thinking, root cause analysis, and problem-solving skills.
• Ability to evaluate cybersecurity risks and recommend appropriate technical controls.
• Good command of English, with the ability to understand technical documentation and communicate with technology vendors.
• Strong communication skills, a collaborative mindset, and the ability to work effectively in a dynamic environment.
• No restrictions on domestic or international travel.

PREFERRED QUALIFICATIONS

• CCNA and/or CCNP certification.
• Palo Alto Networks training or professional certifications.
• CEH (Certified Ethical Hacker) or equivalent cybersecurity certifications.
• Experience with ISO 27001 Information Security Management System.
• Knowledge of PCI DSS compliance requirements.
• Experience with Microsoft Azure Networking and Security services.
• Experience automating operational processes using PowerShell, Python, or similar scripting languages.
• Experience with Microsoft Defender for Cloud.
• Experience with Azure Monitor and Log Analytics.
• Familiarity with ITIL processes and IT service management best practices.