Senior Network Security Engineer - Incident Lead (Firewall)

Tma; Gauteng; On-site; ZAR 900,000 - 1,400,000; Full time

Job summary

Tma is seeking a Senior Network Security Engineer (L3) to lead complex incident responses and design/maintain advanced firewall architectures across multi-client environments. The role requires hands-on expertise, mentorship of L2 engineers, and leadership during 24/7 shift operations.

You will manage policy design, threat prevention profiles, and VPN architectures, with preferred familiarity in Azure. A Bachelor’s degree and PCNSE certification are required, with PCNSA and CCNP/CCNA as

Qualifications

• 5+ years of hands-on experience in network security or network engineering, with a minimum of 2 years at senior/L3 level.
• Expert-level experience designing, configuring, and troubleshooting Palo Alto Networks firewalls in complex multi-client production environments.
• Lead investigation, containment and resolution of complex, high-severity network security incidents.
• Mentor L2 engineers and lead shift handovers and post-incident reviews.

Responsibilities

• Lead the investigation, containment, and resolution of complex and high-severity network security incidents escalated from L2.
• Lead network security projects.
• Configure, optimise, and maintain network firewalls at an advanced level, including policy architecture, zone design, and threat prevention profiles.
• Implement and manage next-generation firewall features, VPN architectures, and advanced network security policies across multi-client environments.
• Conduct root cause analysis on network-related security incidents and produce post-incident reports with remediation recommendations.
• Familiarity with Azure environments will be advantageous.

Skills

Incident response leadership

Senior/L3 network security

Mentoring junior engineers

Network security design

Policy architecture

TCP/IP, VPN, BGP, OSPF

SD-WAN concepts

Azure familiarity

Education

Bachelor's degree in CS/IT or equivalent

Palo Alto Networks PCNSE

PCNSA

CCNP Security / CCNA

Tools

Wireshark

SolarWinds

SNMP

Azure

AWS

Python

Ansible

Palo Alto PA-Series / Panorama

Cisco ASA / Fortinet

Job description

Tma is seeking a Senior Network Security Engineer (L3) to lead complex incident responses and design/maintain advanced firewall architectures across multi-client environments. The role requires hands-on expertise, mentorship of L2 engineers, and leadership during 24/7 shift operations.

You will manage policy design, threat prevention profiles, and VPN architectures, with preferred familiarity in Azure. A Bachelor’s degree and PCNSE certification are required, with PCNSA and CCNP/CCNA as