Participate in the design, implementation, and operation of complex enterprise routing and switching infrastructures across data center, campus, and WAN environments.
Design, implement, and operate firewall and network security platforms, ensuring secure connectivity, segmentation, and policy enforcement at scale.
Define and evolve network and network security architectures, applying defense‑in‑depth, least‑privilege, and security‑by‑design principles.
Architect, operate, and troubleshoot AAA services (RADIUS / TACACS+), supporting secure administrative and user network access.
Design, implement, and maintain Network Access Control (NAC) solutions, enforcing device posture assessment, user access policies, and compliance requirements.
Design and implement network automation solutions to improve reliability, consistency, and operational efficiency (e.g. configuration management, provisioning, validation).
Contribute to technology roadmaps, platform selection, and continuous improvement initiatives.
Collaborate closely with security operations, cloud, infrastructure, and application teams to ensure end‑to‑end service reliability and security alignment.
Drive standardization, documentation, and operational excellence initiatives.
Share knowledge, provide technical guidance, and mentor junior engineers within the team.

Bachelor's degree in Computer Science, Engineering, or a related field
Have 5+ years of hands‑on experience in enterprise network engineering and/or network security roles.
Possess strong expertise in routing protocols (e.g. OSPF, BGP) and advanced switching technologies.
Have extensive hands‑on experience with enterprise firewall platforms (e.g. Cisco, Check Point, Palo Alto, Fortinet or equivalent).
Demonstrate solid, real‑world experience with AAA solutions (RADIUS, TACACS+) and NAC platforms.
Have hands‑on experience with network monitoring and observability systems, such as Zabbix, Grafana, SNMP‑based monitoring, NetFlow / IPFIX, and performance or capacity dashboards.
Have deep understanding of network security concepts such as segmentation, secure access, and incident response.
Are experienced in large‑scale, highly available, and compliance‑driven environments
Are comfortable working across on‑prem, hybrid, and cloud‑connected environments.
Hold relevant certifications (e.g. CCNP/CCIE, security certifications, vendor‑specific firewall, NAC, or automation certifications) — highly valued.
Are fluent in English (written and spoken).
Can operate effectively both independently and as part of a senior technical team

Senior Network Security Engineer

Key skills