Senior Network & Firewall Engineer (Assistant Manager)

About the role

The Senior Engineer for Network and Firewall leads the design, implementation, and maintenance of security controls across data‑centers, office sites and cloud environments. This hands‑on position influences policy creation, handles complex migrations and ensures high‑availability of firewall and VPN services.

Key responsibilities

• Design, implement and validate firewall policies, NAT rules and network segmentation on both on‑premise and cloud enforcement points.
• Build and maintain remote‑access and site‑to‑site VPN services, including tunnel configuration, certificate integration and client posture checks.
• Perform platform upgrades, failover testing and hardware replacements within approved change windows, with documented rollback procedures.
• Troubleshoot complex connectivity and performance issues using packet captures and log analysis, driving root‑cause resolution with network and application owners.
• Automate rule analysis, recertification evidence and configuration backups; mentor junior engineers on policy design and change discipline.

Required profile

• English proficiency B2+ or higher.
• Five or more years of network or network‑security engineering experience, including at least three years administering enterprise firewalls.
• Hands‑on expertise with a major firewall platform and its central management console.
• Practical experience delivering IPsec and SSL VPN services and solid understanding of TCP/IP, routing protocols, DNS and TLS.

Required skills

• Firewall platforms and management consoles (policy, NAT, routing, HA).
• IPsec and SSL VPN configuration and troubleshooting.
• TCP/IP, routing protocols (OSPF, BGP), DNS, TLS.
• Scripting or use of platform APIs for automation and reporting.
• Automation of rule analysis, recertification and configuration backup.
• Experience with cloud‑native firewalls, secure web gateways or zero‑trust network access solutions.