Network And Security Engineer

Network Recruitment; Johannesburg; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Network Recruitment is seeking a security-focused network engineer who enjoys working across networking, firewalls, infrastructure security and modern security technologies.

You will troubleshoot issues, investigate risks, implement practical solutions and collaborate with infrastructure, application and development teams to ensure security is integrated into new deployments.

Qualifications

• Extensive hands-on experience in enterprise networks and security operations.
• Strong knowledge of firewall policies, segmentation and VPNs.
• Experience with PAM, EDR/XDR and vulnerability management.
• Solid understanding of container security and Kubernetes security principles.
• Ability to collaborate with infrastructure, app and development teams.

Responsibilities

• Manage and troubleshoot FortiGate/FortiOS firewalls, including policies, NAT and VPNs.
• Oversee HP and Sophos switching environments and VLANs.
• Implement network segmentation and security controls.
• Support PAM, access controls and secret management.
• Enhance EDR/XDR capabilities and incident response.
• Coordinate vulnerability management and remediation tracking.
• Support Zero Trust networks and JIT access controls.
• Maintain network diagrams, IP/VLAN information and firewall documentation.
• Collaborate with teams to embed security in deployments.

Skills

Networking

FortiGate

Security Operations

Vulnerability Management

Secrets Management

Kubernetes Security

Zero Trust

EDR/XDR

PAM

Tools

FortiOS

HP Switching

Sophos Switching

Nutanix AHV

Kubernetes

Job description

This is a technical role suited to someone who enjoys working across networking, firewalls, infrastructure security and modern security technologies , while also being comfortable troubleshooting issues, investigating risks and implementing practical solutions.

Key Responsibilities

Manage and troubleshoot FortiGate/FortiOS firewalls , including policies, NAT, VPNs, routing and segmentation. Manage HP and Sophos switching environments , including VLANs, trunks, routing and network troubleshooting. Implement and maintain network segmentation and security controls . Support and improve Privileged Access Management (PAM) and administrative access controls. Manage and enhance EDR/XDR capabilities, including threat detection, investigation and response. Own or support Vulnerability Management , including scanning, assessment, prioritisation and remediation tracking. Manage secrets and certificate management , including service accounts, API keys, credentials and certificates. Support container and Kubernetes security , including image vulnerabilities, secrets, RBAC, service accounts and runtime security principles. Review firewall rules, privileged access and infrastructure configurations to identify security risks. Assist with security incidents, technical investigations and remediation . Support disaster recovery, backup and infrastructure resilience testing from a network and security perspective. Implement and support Zero Trust Network Access (ZTNA) and identity- and device-based access controls. Maintain accurate network diagrams, IP/VLAN information, firewall documentation and security procedures. Collaborate with infrastructure, application and development teams to ensure security is incorporated into new deployments.

Technical Requirements

Strong practical experience with:

• Networking: TCP/IP, VLANs, Routing, Switching, VPNs, NAT, DNS, DHCP
• Firewalls: FortiGate, FortiOS
• Switching: HP, Sophos
• Security: PAM, EDR/XDR, Vulnerability Management, Secrets Management, Certificate Management, Network Segmentation, Security Hardening, Zero Trust
• Modern Infrastructure: Container Security, Kubernetes Security Principles
• Advantageous Nutanix AHV Prism Central Nutanix Flow Hyper-V Nutanix Move Hyper-V to Nutanix migrations Disaster Recovery environments