Network Security Engineer

Rubikal

We need an Intermediate to Senior Network Security Engineer, preferred with experience in F5, PaloAlto, and Fortinet security products, such as WAF and NGFW.

The candidate will implement and maintain the network and security on IaaS cloud, mainly OpenStack. He should oversee network configuration, FW rules, IPSec, and various VPN technologies.

• Experience in designing, planning, and implementing various secure network topologies using multivendor technologies (Cisco, PaloAlto ...)
• WAN and LAN security
• Site-to-site VPN and remote VPN access
• Implementing FW policies and threat protection
• Security upgrades, patching, and configuration backup
• Experience in implementation and manage of network technologies and services:
• DNS, DHCP, SYSLOG and IP address management and route optimization
• SNMP and xFlow, AAA, RADIUS and authentication platforms
• IGP (RIP, OSPF...) , BGP , gateway redundant protocol such as VRRP
• L2 ethernet switching network based on Cisco technology: Access and core, port-channel and trunk ports, uplink and access, VLANs, STP flavors and other loop-prevention technologies
• Wireless access point design, configuration and troubleshooting
• Providing level 2 support for access, core and perimeter infrastructure:
• Monitoring the KPI s for network and security physical and virtual appliances such as CPU, memory, link utilization, response time and throughput, and maintain the agreed level of operational health
• Security controls implementation, auditing and monitoring
• Incident handling, problem troubleshooting and reporting
• Experience in providing Level2 support, incident handling and root cause analysis reporting
• Continuously monitor web traffic and application behavior to detect, analyze, and respond to threats leveraging both traditional network tools and application-layer firewalls.
• Managing the relationship with vendors and service providers, support contract discussion and renewal, SLA tracking, and issues escalation
• Evaluate and remediate vulnerabilities related to web application threats (e.g., OWASP Top Ten), leveraging virtual patching and rapid policy adjustments when needed.
• Deploy network segmentation and policy enforcement strategies, ensuring defense-in-depth across layers through segmentation, VPNs, and secure remote access architectures.
• Leverage automation and scripting (e.g., Python, RegEx) for deployment, monitoring, and rule management of WAF and network security infrastructure.