Network Engineer (Security)

Boardroom Appointments; Sandton; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Boardroom Appointments is seeking a Network Engineer (Security) based in Sandton, Gauteng, South Africa. You will plan and implement network infrastructure and security strategies while managing IT support staff on critical projects.

The role requires deep hands-on firewall expertise across Palo Alto, Fortinet and Check Point, VPN setup, rule management, and advanced troubleshooting. Strong collaboration across teams is essential to deliver secure, reliable networks.

Qualifications

• 7–10 years of experience in Cisco Networking / Security / Converged Communications.
• Strong hands-on experience with Palo Alto, Panorama, Fortigate, FortiManager/Analyzer, Cisco ISE, Check Point NGFW.
• Ability to create, change and analyse firewall rules and troubleshoot.
• Configure and troubleshoot HA clusters, backups, upgrades, patches and migrations of firewalls.
• Experience with packet captures and troubleshooting on Palo Alto, Check Point and Fortigate firewalls.
• Knowledge of Check Point internal communication protocols and troubleshooting skills.
• Site-to-site IPSEC VPN and Remote VPN (SSL) setup across Check Point, Palo Alto and Fortigate.
• Advanced production problem troubleshooting with RCA and fault diagnosis.
• Regular review and optimization of firewall rule bases.

Skills

Firewall administration

Network security

Troubleshooting

Policy management

Team leadership

VPN setup

Tools

Palo Alto

Panorama

FortiGate

FortiManager/Analyzer

Cisco ASA

Check Point NGFW

Cisco ISE

Smart-1 appliances

Job description

About the job Network Engineer (Security)

As a Network Engineer (Security),you'll be responsible for planning and implementing network infrastructure andsecurity strategies. You will also have the opportunity to work on business-critical projects as well asmanage IT support staff.

Requirements

• 1. Administration and Management of Palo Alto, FortiGate , Cisco ASA and Check Point firewallinfrastructure.
• 2. Must have strong hands-on experience with Palo Alto Firewalls, Panorama, Fortigate firewalls, FortiManager & Analyzer appliances, CISCO ISE and repower, Checkpoint Next-Generation Firewalls andSmart-1 appliances.
• 3. Creating, changing and analysing rules based on requirements and troubleshooting.
• 4. Configure and troubleshoot HA Cluster, Backup, Upgrade, Patch and Migrate Firewalls
• 5. Must have knowledge using the Packet captures and troubleshooting skills in Palo Alto, Checkpointand Fortigate firewalls.
• 6. Must have knowledge of Check Point internal communication protocols and troubleshooting skills.
• 7. Knowledge of setup site-to-site IPSEC VPN tunnel and Remote VPN (SSL) within and acrossplatforms like Checkpoint, Palo alto and Fortigate Firewalls.
• 8. Advanced troubleshooting of production problems with RCA and fault diagnosis.
• 9. Perform regular review of firewall rule bases and recommend necessary optimization actions.
• 10. Upgrade and patch management of Firewalls like Palo-alto, Fortinet and Checkpoint Firewalls.
• 11. Must have strong hands-on experience with Palo Alto Firewalls, Panorama, Fortigate firewalls, FortiManager & Analyzer appliances, CISCO ISE and repower, Checkpoint Next-Generation Firewalls andSmart-1 appliances.
• 12. Creating, changing and analysing rules based on requirements and troubleshooting.
• 13. Configure and troubleshoot HA Cluster, Backup, Upgrade, Patch and Migrate Firewalls
• 14. Must have knowledge using the Packet captures and troubleshooting skills in Palo Alto, Checkpointand Fortigate firewalls.

Qualifications:

• 2. Work Experience of 7 to 10 years in Cisco Networking / Security / Converged Communications ispreferred
• 3. Quick learner, Good attitude and Communication
• 4. PalaAlto, Checkpoint, Fortinet, F5, Juniper trained and certified professional too are required.
• 5. Knowledge of Riverbed and Bluecoat proxy is an added advantage.