Infrastructure Security Engineer (PID0620)

Job Description

This is a remote position.

We are seeking a highly skilled Senior Network Security Engineer for a full-time contract position. This role offers a daily rate and provides an excellent opportunity to work on large-scale infrastructure projects. While the role is primarily remote, please note that English is the only language requirement, with only occasional onsite visits to Germany required.

Responsibilities

• Security Deployment: Develop and execute detailed security deployment plans, outlining implementation phases, resource requirements, and timelines.

• Implementation: Install and configure advanced security solutions, ensuring all configurations strictly adhere to defined security standards and industry best practices.

• Documentation: Maintain precise and thorough documentation of the security environment, including protocols, configurations, and decision justifications to ensure a clear audit trail.

• Continuous Improvement: Regularly update documentation to reflect architectural changes and utilise it to track process execution and identify compliance issues.

• Validation & Optimisation: Continuously validate implementation processes to ensure alignment with organisational goals, proposing corrective actions for any identified inefficiencies.

• Collaboration: Share technical expertise within the security architecture community and promote a 'security-by-design' approach across all stakeholder groups.

Requirements

Senior-level experience in security engineering and delivery within large-scale enterprise and data centre environments.

Network Architecture: Proven track record in designing secure architectures, including LAN/WAN, Zero Trust models, and micro-segmentation.

Technical Stack: Strong hands-on experience with firewalls (Palo Alto, Checkpoint, Fortinet, or Cisco), IDS/IPS, NAC, proxies, and VPNs.

Advanced Networking: Knowledge of load balancers (F5, Radware), SD-WAN, DDoS protection, SASE, and network virtualisation (SDN, ACI, or NSX).

DNS Operations: Proficient in managing DNS architecture and platforms such as Infoblox or Linux-based BIND services in hybrid environments.

Automation: Experience with automation using Ansible and scripting in Python to streamline security workflows.

Compliance: Familiarity with ensuring network security compliance against frameworks such as ISO 27001, NIST, GDPR, and SOC2.

Preferred Skills: Advanced Linux knowledge, experience with SIEM operations or threat hunting, and proficiency in Jira and Confluence.

Eligibility: Residency in the EU, EEC, UK, or Switzerland.

Benefits

As a freelancer / contractor with us, you will enjoy flexible working hours and the freedom to choose your own projects. Our platform gives you access to exciting projects in various industries and supports you in advancing your career. You'll benefit from competitive pay and a dedicated team to help you with any questions you may have. Work independently and utilise our strong network to achieve your professional goals.