- Company Name
- SoftNice UG
- Job Title
- Senior Network Security Engineer (L4)
- Job Description
-
Job Title: Senior Network Security Engineer
Role Summary:
Senior network security professional leading the design, deployment, and maintenance of secure, high‑availability infrastructure across large, distributed environments. Drives complex install, migration, and decommission projects, performs incident response and root‑cause analysis, and mentors junior staff.
Expectations:
- 6–10+ years of enterprise network security experience.
- Proven record in large, high‑availability environments.
- Demonstrated leadership in project implementation and incident handling.
- Strong communication, documentation, and analytical skills.
Key Responsibilities:
- Design, configure, and troubleshoot Cisco ISE (authentication policies, authorization profiles, device onboarding).
- Manage Cisco ASA/FTD, including VPN, NAT, ACL, clustering, routing, and FMC.
- Administer Check Point R80.x (SmartConsole, VPN, IPS, rule optimization, HA/cluster).
- Implement F5 APM access policies, VPN, and SAML/OAuth integration.
- Configure Nexus switching/routing (5k/7k/9k), VLANs, VPC, OSPF/BGP fundamentals.
- Capture and analyze traffic with Wireshark, tcpdump.
- Deploy, maintain, and enhance cloud networking (AWS/Azure) components.
- Lead installation, upgrade, migration, and decommission projects.
- Handle major security incidents, produce RCA documentation.
- Mentor and guide junior engineers.
Required Skills:
- Expertise with Cisco ISE, ASA/FTD, Check Point R80.x, F5 APM, Nexus switch/routing.
- Proficient in Wireshark, tcpdump, and packet analysis.
- Experience with cloud networking (AWS/Azure).
- Knowledge of Python, Ansible for automation/scripting (preferred).
- Strong troubleshooting, analytical, and documentation abilities.
- Effective oral and written communication; ability to work across global teams.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- Relevant certifications (preferred): Cisco CCNP Security, Cisco ISE, Check Point CCP-SEC, F5 APM Associate, CISSP or CISSP‑Associate.