We are seeking a hands‑on Network Security Engineer to operate and continuously improve our network security stack—primarily enterprise firewalls (Palo Alto, Fortinet, Cisco), secure web gateways/proxies, and site‑to‑site/remote‑access VPNs. The ideal candidate is an operator‑engineer hybrid with deep knowledge across L2–L7 security controls, strong troubleshooting skills, and proven experience in high‑availability, low‑latency environments. Experience supporting MAS TRM or BNM RMiT audits is highly preferred.

Operations & Reliability

• Own day‑to‑day operation of Palo Alto, Fortinet, and Cisco firewalls, Proxies, and VPN appliances (IPSec/SSL).
• Monitor and maintain HA clusters, dynamic routing (BGP/OSPF) on firewalls, and NAT/policy objects to ensure availability and performance SLAs.
• Execute change management: rule modifications, NAT adjustments, SSL decryption policies, URL categories and app‑ID signatures.
• Perform break/fix ...