Senior Security Network Engineer

Tma; Gauteng; On-site; ZAR 900,000 - 1,400,000; Full time

Job summary

Tma is seeking a Senior Network Security Engineer (L3) to lead complex incident responses and design/maintain advanced firewall architectures across multi-client environments. The role requires hands-on expertise, mentorship of L2 engineers, and leadership during 24/7 shift operations.

You will manage policy design, threat prevention profiles, and VPN architectures, with preferred familiarity in Azure. A Bachelor’s degree and PCNSE certification are required, with PCNSA and CCNP/CCNA as

Qualifications

• 5+ years of hands-on experience in network security or network engineering, with a minimum of 2 years at senior/L3 level.
• Expert-level experience designing, configuring, and troubleshooting Palo Alto Networks firewalls in complex multi-client production environments.
• Lead investigation, containment and resolution of complex, high-severity network security incidents.
• Mentor L2 engineers and lead shift handovers and post-incident reviews.

Responsibilities

• Lead the investigation, containment, and resolution of complex and high-severity network security incidents escalated from L2.
• Lead network security projects.
• Configure, optimise, and maintain network firewalls at an advanced level, including policy architecture, zone design, and threat prevention profiles.
• Implement and manage next-generation firewall features, VPN architectures, and advanced network security policies across multi-client environments.
• Conduct root cause analysis on network-related security incidents and produce post-incident reports with remediation recommendations.
• Familiarity with Azure environments will be advantageous.

Skills

Incident response leadership

Senior/L3 network security

Mentoring junior engineers

Network security design

Policy architecture

TCP/IP, VPN, BGP, OSPF

SD-WAN concepts

Azure familiarity

Education

Bachelor's degree in CS/IT or equivalent

Palo Alto Networks PCNSE

PCNSA

CCNP Security / CCNA

Tools

Wireshark

SolarWinds

SNMP

Azure

AWS

Python

Ansible

Palo Alto PA-Series / Panorama

Cisco ASA / Fortinet

Job description

Purpose of the Role

The Senior Network Security Engineer (L3) is the highest tier of technical escalation within a SOCaaS network security function, responsible for the design, optimisation, and senior-level management of network firewall infrastructure and complex client network environments.

Operating on a rotational shift basis to support extended international timezone coverage, the incumbent leads incident response for high-severity network events, mentors L2 engineers, drives continuous improvement across network security tooling and processes, and serves as the primary technical authority for client network security engagements.

This is a hands-on senior role requiring both deep technical mastery and the leadership capability to maintain operational excellence across a 24/7 shift environment. You will be required to be available after hours when needed.

Requirements

Senior Network Security Operations & Incident Leadership

• Lead the investigation, containment, and resolution of complex and high-severity network security incidents escalated from L2 during shift and on-call periods.
• Lead network security projects.
• Configure, optimise, and maintain network firewalls at an advanced level, including policy architecture, zone design, and threat prevention profiles.
• Implement and manage next-generation firewall features, VPN architectures, and advanced network security policies across multi-client environments.
• Conduct root cause analysis on network-related security incidents and produce structured post-incident reports with actionable remediation recommendations.
• Familiarity with Azure environments will be advantageous.

Team Leadership & L2 Development

• Provide technical leadership, guidance, and structured mentorship to L2 Network Security Engineers during shift operations and day-to-day work.
• Review and quality-assure L2 escalation documentation, incident reports, and configuration changes before client communication or implementation.
• Lead shift handovers, technical stand-ups, and post-incident reviews with clear, actionable outputs for the team.
• Identify skills gaps within the network security team and recommend or deliver targeted development interventions.

Compliance, Documentation & Client Engagement

• Maintain comprehensive, accurate documentation for network architecture, security policies, runbooks, and client-specific configurations.
• Conduct security assessments, contribute to audit processes, and ensure client environments adhere to NIST, ISO 27001, and CIS standards.
• Engage directly with client technical stakeholders on network security matters, providing credible, expert guidance and clear communication of risk and remediation.

Education & Certification

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent demonstrated experience.
• Palo Alto Networks PCNSE required; PCNSA as a minimum with active pursuit of PCNSE.
• Additional networking certifications strongly advantageous: CCNP Security, CCNA, or equivalent senior-level qualification.

Experience

• 5+ years of hands-on experience in network security or network engineering, with a minimum of 2 years at senior/L3 level.
• Expert-level experience designing, configuring, and troubleshooting Palo Alto Networks firewalls (PA-Series, Panorama) in complex, multi-client production environments.
• Proven experience leading network security incident response and conducting root cause analysis on high-severity events.
• Demonstrated experience mentoring or providing technical leadership to junior or intermediate engineers in an operational environment.
• Comfortable operating as the senior technical authority during extended or non-standard shift hours with full accountability for escalation decisions.

Technical Skills

• Advanced knowledge of network protocols: TCP/IP, DNS, DHCP, VPN, BGP, OSPF, EIGRP, and SD-WAN concepts.
• Proficiency with network monitoring and diagnostic tools: Wireshark, SolarWinds, SNMP, and equivalent platforms.
• Cloud networking experience in AWS and/or Azure hybrid environments.
• Scripting and automation capability: Python, Ansible, or equivalent for network operations and configuration management.
• Familiarity with additional security appliance platforms advantageous: Cisco ASA, Fortinet.

Key Performance Indicators

• SLA adherence and resolution quality for high-severity network incidents across shift coverage periods.
• Client environment stability and reduction in repeat incidents through proactive architecture improvements and detection tuning.
• L2 engineer development progress and reduction in unnecessary L3 escalations through effective mentorship.
• Quality, accuracy, and completeness of technical documentation, post-incident reports, and client-facing communications.
• Automation and process improvement contribution, measurable reduction in manual operational tasks across the network security function.