Senior Network Security Engineer

Billennium; Town of Poland (NY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Billennium is seeking a Senior Network Security Engineer (Edge Defense) to design, implement, and optimize perimeter and cloud security across hybrid and multi-cloud environments. You will lead deployments of NGFWs (Palo Alto and Fortinet), develop Zero Trust solutions, and drive secure architectures for AWS, Azure, and GCP.

You will automate security infrastructure with Ansible, Terraform, and Python, build observability for security operations, and participate in global on-call rotations while

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Software Engineering, or related field.
• 5+ years of hands-on experience managing enterprise firewall environments.
• Strong expertise with Palo Alto and/or Fortinet Next-Generation Firewalls.
• Experience with SSL/TLS inspection, IPS/IDS, URL filtering, threat prevention, WildFire, GlobalProtect, and user identification technologies.
• Practical experience implementing network security controls in at least two major cloud providers (AWS, Azure, GCP).
• Strong understanding of hybrid and multi-cloud networking concepts, including VPCs, VNETs, and Transit Gateways.

Responsibilities

• Lead the deployment, configuration, and maintenance of Palo Alto and/or Fortinet NGFW environments with high-availability architectures.
• Design and implement Zero Trust Network Access (ZTNA) solutions and support the transition from traditional VPNs.
• Engineer and manage network security controls across AWS, Azure, and GCP environments.
• Develop and optimize DDoS mitigation strategies and advanced threat prevention capabilities.
• Drive the full lifecycle of Edge Security solutions, from design and implementation to global rollout and continuous improvement.
• Act as a technical SME for complex network security incidents, troubleshooting and root cause analysis.
• Build monitoring, telemetry, and observability solutions to improve visibility into network security operations.
• Automate security infrastructure and policy management using Infrastructure as Code and orchestration tools.
• Develop APIs and self-service solutions that enable secure consumption of network security services.
• Participate in an on-call rotation supporting critical global security services.

Skills

Firewall management

Cloud security

Zero Trust

Security automation

Incident response

Education

Bachelor's degree in Computer Science, Information Security, Software Engineering, or related field

Tools

Palo Alto NGFW

Fortinet NGFW

Ansible

Terraform

Python

Job description

At Billennium, we are a global technology company delivering innovative IT services and solutions for enterprises worldwide. With a strong focus on collaboration, continuous learning, and technological excellence, we empower our employees to grow their careers while contributing to impactful projects for leading international organizations.

About the role

We are looking for a Senior Network Security Engineer (Edge Defense) to join the Network Security Product area supporting a global enterprise environment. In this role, you will be responsible for designing, implementing, and optimizing perimeter and cloud security solutions, with a strong focus on Next-Generation Firewalls, Zero Trust Network Access, DDoS protection, and security automation. You will help shape the evolution of network security capabilities across hybrid and multi-cloud infrastructures while ensuring resilience against emerging cyber threats.

Your responsibilities

• Lead the deployment, configuration, and maintenance of Palo Alto and/or Fortinet NGFW environments with high-availability architectures.
• Design and implement Zero Trust Network Access (ZTNA) solutions and support the transition from traditional VPNs.
• Engineer and manage network security controls across AWS, Azure, and GCP environments.
• Develop and optimize DDoS mitigation strategies and advanced threat prevention capabilities.
• Drive the full lifecycle of Edge Security solutions, from design and implementation to global rollout and continuous improvement.
• Act as a technical SME for complex network security incidents, troubleshooting and root cause analysis.
• Build monitoring, telemetry, and observability solutions to improve visibility into network security operations.
• Automate security infrastructure and policy management using Infrastructure as Code and orchestration tools.
• Develop APIs and self-service solutions that enable secure consumption of network security services.
• Participate in an on-call rotation supporting critical global security services.

Must have

• Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related field.
• 5+ years of hands‑on experience managing enterprise firewall environments.
• Strong expertise with Palo Alto and/or Fortinet Next-Generation Firewalls.
• Experience with SSL/TLS inspection, IPS/IDS, URL filtering, threat prevention, WildFire, GlobalProtect, and user identification technologies.
• Practical experience implementing network security controls in at least two major cloud providers (AWS, Azure, GCP).
• Strong understanding of hybrid and multi-cloud networking concepts, including VPCs, VNETs, and Transit Gateways.
• Experience with security automation using Ansible, Terraform, Python, or similar tools.
• Knowledge of Zero Trust architectures, SASE frameworks, and modern remote access solutions.
• Strong troubleshooting, packet analysis, and network security investigation skills.
• Excellent communication skills and ability to collaborate across global teams.

Nice to have

• Experience with DDoS mitigation platforms such as Akamai, Cloudflare, or F5.
• Knowledge of Zscaler, Prisma Access, or other cloud-delivered security platforms.
• Experience in highly regulated industries such as Healthcare, Pharmaceuticals, or Financial Services.
• Familiarity with large-scale environments supporting thousands of diverse device types, including IoT and medical devices.
• Experience with Edge Computing and SASE architecture initiatives.

What we offer

• Stable employment and long-term cooperation.
• Attractive salary and benefits package.
• Flexible working model (remote/hybrid/on‑site depending on the project).
• Access to training platforms, certifications, and professional development opportunities.
• Participation in international and innovative technology projects.
• Friendly work environment focused on knowledge sharing and collaboration.
• Private healthcare and additional employee benefits.
• Opportunity to work with modern technologies and experienced specialists.

Recruitment process

• Final decision and offer presentation.