استخدام senior network security engineer

توضیحات آگهی

Job Overview
We are looking for an experienced Senior Network Security Engineer to design implement operate and optimize enterprise network security infrastructure ensuring security availability performance and scalability The role requires strong networking fundamentals advanced troubleshooting skills technical ownership and collaboration across engineering and security teams
Key Responsibilities
Design implement maintain and improve secure scalable and highly available network security infrastructure
Configure and operate NGFW IDS IPS WAF VPN NAC web filtering DNS security DDoS protection and related security platforms
Manage firewall policies NAT routing segmentation access controls SSL TLS and certificate configurations
Troubleshoot complex Layer 2 7 networking and security issues using packet captures logs network flows and protocol analysis
Maintain high availability architectures redundancy failover and secure production change processes
Identify vulnerabilities perform security hardening coordinate patching and support security monitoring and incident response with SOC and infrastructure teams
Develop automation workflows and scripts to improve configuration management monitoring reporting and operational efficiency
Maintain technical documentation contribute to architecture decisions collaborate with vendors and cross functional teams and mentor other engineers
Required Qualifications
Typically 5 years of hands on experience in enterprise networking and network security
Strong knowledge of TCP IP routing and switching OSPF BGP PBR VLANs LACP STP NAT DNS DHCP and network segmentation
Advanced troubleshooting skills across Layers 2 7 including experience with Wireshark tcpdump and equivalent tools
Hands on experience with at least one major NGFW platform such as Fortinet FortiGate or Cisco Secure Firewall FTD
Strong knowledge of firewall policies VPN technologies IPsec IKE IKEv2 SSL VPN TLS PKI IDS IPS WAF and access control mechanisms
Practical understanding of high availability redundancy failover production change management and rollback procedures
Familiarity with NAC RADIUS 802 1X security hardening vulnerability remediation centralized logging and SIEM integration
Basic scripting or automation skills using Python Bash Ansible or equivalent tools familiarity with REST APIs
Understanding of network security principles and frameworks such as ISO 27001 NIST and CIS Controls
Preferred Qualifications
Experience with F5 BIG IP Cisco ISE Cisco Nexus VXLAN EVPN vPC and leaf spine architectures
Experience with DDoS mitigation CDN security application delivery or cloud and hybrid network security
Familiarity with Git and monitoring logging tools such as Zabbix Grafana Prometheus or Splunk
Experience with security audits compliance assessments and infrastructure hardening
Relevant certifications including Cisco CCNP CCIE Fortinet F5 or Cisco ISE certifications
Required Skills Competencies
Advanced troubleshooting and analytical thinking
Technical ownership and independent problem solving
Security mindset and risk awareness
Effective communication and cross functional collaboration
Technical documentation knowledge sharing and mentorship
Continuous improvement of security reliability and operational efficiency
Practical experience and demonstrated technical competence are valued over certifications alone
شرکت اسنپ مارکت Snapp Market
دسته بندی IT DevOps Server
نحوه همکاری تمام وقت
نوع همکاری حضوری
مدرک تحصیلی کارشناسی
سابقه کار سه تا شش سال
حقوق توافقی
جنسیت مهم نیست
مهارت ها Network Security CISCO NETWORK
شهر تهران تهران