The posting
- Long-term career opportunity
- Hybrid working model with 2-3 office days per week
- Occasional travel to customer locations across Europe
- Cafeteria package
- Medical insurance
- Vibrant working culture featuring an office gym, internal sports clubs, and an inclusive international team.
- 10+ years of demonstrable, hands-on experience in cybersecurity or network security engineering within regulated enterprise environments.
- Expert-level mastery of enterprise firewall platforms, HA clustering, and threat prevention architecture.
- Extensive experience with Cisco and Arista network routing, switching, and VXLAN/EVPN fabrics.
- Deep proficiency in Linux system administration, hardening, and enterprise automation (Ansible, Terraform, Python).
- Mastery of core protocols (DNS, HTTP/S, BGP, OSPF, VXLAN, IPsec) and perimeter defense controls.
- Excellent technical documentation, audit presentation, and stakeholder communication abilities.
- 5+ years of work experience with Python (Programming Language)
- 3+ years of work experience with Spring Framework
- Lead the end-to-end design, implementation, and lifecycle management of enterprise firewalls, including Palo Alto PAN-OS, Check Point Gaia, Fortinet, and Cisco Secure Firewall (FTD/FMC).
- Architect and operate Cisco (IOS/NX-OS) and Arista (EOS/CloudVision) switching and routing infrastructure, including BGP, OSPF, VXLAN/EVPN, and segment routing across multi-site data centers.
- Architect and optimize enterprise proxy, WAF, and load-balancing solutions, including Zscaler ZIA/ZPA, Blue Coat, HAProxy, NGINX, and F5 BIG-IP/ASM.
- Design and enforce security posture for containerized workloads on OpenShift and Kubernetes using Cilium/eBPF network policies.
- Build and own Infrastructure as Code (IaC) automation frameworks using Ansible, Terraform, Python, and Bash.
- Architect SIEM logging pipelines (Splunk, CRIBL, XSOAR) and partner with SOC leadership on detection engineering maturity.
- Establish observability frameworks across the security stack using Prometheus, Grafana, and Zabbix.
- Act as a senior technical authority and escalation point, mentoring engineers and performing architecture reviews for critical network and security initiatives.
- Define and enforce Linux system hardening baselines (CIS Benchmarks) across hybrid infrastructure environments.
- Drive the design and governance of secure network architectures across on-premises, cloud, and containerized environments, ensuring scalability, resilience, and compliance.



