Job Overview

We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.

The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.

Key Responsibilities

Design, deploy, and manage enterprise network security solutions
Configure and administer Fortinet, SonicWall, and Palo Alto firewalls
Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies
Monitor security events using SIEM, XDR, and SOC monitoring platforms
Investigate security incidents, perform threat analysis, and support incident response activities
Manage firewall policies, security rules, and compliance controls
Implement Zero Trust Network Access (ZTNA) and identity-based security controls
Support cloud security initiatives across AWS, Azure, and hybrid infrastructure
Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions
Conduct vulnerability assessments and remediation activities
Collaborate with infrastructure, cloud, and application teams to secure enterprise environments
Maintain security documentation, diagrams, SOPs, and audit records
Participate in on-call rotations and critical incident handling
GPU East-West and North-South traffic control and security
AI networking and security integration expertise
Understanding of AI infrastructure design and reference architectures
SOP and runbook development and maintenance
Incident, problem, and capacity management
Business continuity and disaster recovery planning for AI workloads
Proactive risk identification and mitigation to avoid business impact
Compliance with industry frameworks and standards such as NIST, ISO, etc.

Required Skills & Technologies

Firewall & Network Security

Fortinet FortiGate
SonicWall
Palo Alto Networks
Check Point (preferred)
Cisco Firepower / ASA
VPN Technologies (IPSec / SSL VPN)
IDS/IPS
Web Application Firewall (WAF)
NAC (Network Access Control)

Modern Security Technologies

Zero Trust Architecture (ZTA)
ZTNA (Zero Trust Network Access)
SASE (Secure Access Service Edge)
SD-WAN Security
SSE (Security Service Edge)
CASB (Cloud Access Security Broker)
Micro-segmentation
Secure Remote Access Solutions

SIEM, SOC & Threat Detection

Experience with one or more:

Splunk
QRadar
Microsoft Sentinel
LogRhythm
ArcSight
Elastic SIEM

Knowledge of:

SOC operations
Threat hunting
Log correlation
MITRE ATT&CK framework
Incident response
Threat intelligence integration

Cloud & Infrastructure Security

AWS Security
Microsoft Azure Security
Hybrid cloud networking
Cloud firewall management
Security Groups / NSGs
Identity & Access Management (IAM)

Endpoint & Advanced Security

EDR/XDR platforms
CrowdStrike
Microsoft Defender
SentinelOne
Endpoint hardening
DLP (Data Loss Prevention)
Email security solutions

Networking Fundamentals

Strong understanding of:

TCP/IP
Routing & Switching
VLANs
BGP / OSPF
DNS / DHCP
Load Balancing
Network troubleshooting

Automation & Scripting (Preferred)

Python
PowerShell
Bash scripting
Security automation
SOAR platforms

Preferred Certifications

Fortinet NSE / FCP
Palo Alto PCNSA / PCNSE
CCNP Security
CISSP
CEH
CompTIA Security+
Microsoft SC Certifications
AWS Security Specialty

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.

Soft Skills

Strong analytical and troubleshooting skills
Ability to work in high-pressure environments
Excellent communication and stakeholder management
Strong documentation and reporting abilities
Proactive mindset with focus on continuous improvement

Network Security Engineer

Začněte e-mailem