Network & Security Engineer

About Konecta

Konecta is a global leader in Customer Experience (CX) and Business Process Outsourcing (BPO), providing digital transformation, technology, and customer management solutions to leading organizations worldwide.

With a strong international presence, Konecta combines technology, data, AI, and human expertise to deliver innovative and scalable solutions for its clients.

Hands‑On Fortinet, Palo Alto, Cisco — Network Policies, VPN, Routing, Daily Operations, Security & PCI Compliance

Position Overview The Network & Security Engineer supports daily network and security operations across MEA sites. The role requires 1–3 years of hands‑on experience with Fortinet, Palo Alto, and Cisco technologies, including firewall configuration, VPN management, routing, network policies, PCI audit support, and security monitoring. The engineer will handle daily troubleshooting, new site connectivity, and operational monitoring while following IT governance and compliance standards.

Key Responsibilities

1. Firewall & Security Administration

• Configure, manage, and troubleshoot Fortinet FortiGate, Palo Alto, and Cisco ASA/Firepower firewalls.
• Apply and maintain network security policies, NAT rules, ACLs, segmentation rules, and internet filtering.
• Configure and monitor IPsec VPN tunnels, SSL VPN, and remote access gateways.
• Review firewall logs, identify anomalies, and escalate critical security events.
• Support HA cluster monitoring, failover testing, and firmware updates

2. Network Operations & Routing

• Configure and troubleshoot routing (static routes, policy‑based routing, inter‑VLAN routing).
• Support daily network operations across MEA offices (LAN/WAN/Wi‑Fi).
• Perform switch configuration (Cisco/Meraki/Fortinet), VLAN creation, trunking, and port security.
• Monitor network performance, bandwidth usage, and device health.
• Assist in network upgrades, patching, and hardware replacements.

3. New Sites & New Connections

• Support deployment of new office sites, including:
• Firewall setup
• Routing configuration
• VPN connectivity
• Network segmentation
• Switch and Wi‑Fi setup
• Coordinate with ISPs for new circuits, IP assignments, and connectivity testing.
• Validate network readiness and ensure compliance with corporate standards.

4. VPN & Remote Access Support

• Configure and support:
• Fortinet SSL VPN
• Fortinet IPsec tunnels
• Palo Alto GlobalProtect
• Cisco AnyConnect
• Troubleshoot user VPN access issues and authentication failures.
• Monitor VPN stability and performance for remote teams.

5. Daily Network Troubleshooting

• Respond to daily network incidents (connectivity issues, latency, packet loss, routing failures).
• Troubleshoot firewall blocks, policy mismatches, and NAT issues.
• Resolve switch port issues, DHCP conflicts, and Wi‑Fi connectivity problems.
• Escalate complex incidents to senior engineers when required.

6. Daily Security Activities

• Monitor firewall security logs for anomalies, blocked traffic, and suspicious patterns.
• Review alerts from firewalls, SIEM tools, endpoint security platforms, and monitoring dashboards.
• Validate that critical security policies (internet filtering, access rules, VPN policies) are functioning correctly.
• Check IPsec/SSL VPN tunnels for uptime, stability, and unusual authentication attempts.
• Perform daily health checks on firewalls, switches, and network devices (CPU, memory, sessions, link status).
• Track and respond to security incidents such as unauthorized access attempts or abnormal traffic.
• Support vulnerability remediation (patching, rule updates, configuration hardening).
• Maintain daily security documentation (incident logs, rule changes, checklists).

7. PCI Compliance, Audits & Scanning

• Support PCI DSS audit activities, including evidence collection and remediation tasks.
• Review and respond to PCI vulnerability scans, firewall scans, and penetration test findings.
• Validate that firewall rules, segmentation, and access controls meet PCI requirements.
• Ensure secure configuration of network devices in PCI‑scoped environments.
• Track remediation of PCI findings and coordinate with senior engineers and security teams.
• Maintain documentation required for PCI audits (network diagrams, rule sets, change logs).
• Support continuous compliance monitoring and ensure adherence to corporate security standards.

8. Documentation & Governance

• Maintain updated network diagrams, firewall rule documentation, and change logs.
• Follow IT governance processes for change management and incident reporting.
• Ensure compliance with corporate security standards, audit requirements, and PCI DSS controls.
• Document configurations, SOPs, and troubleshooting steps.

Qualifications & Experience

• 1–3 years of hands‑on experience in network or security engineering.
• Strong practical experience with Fortinet FortiGate configuration and troubleshooting.
• Experience with Palo Alto (policies, NAT, VPN, GlobalProtect).
• Experience with Cisco ASA/Firepower or Cisco networking devices.
• Solid understanding of routing, VLANs, NAT, VPNs, network policies, and segmentation.
• Experience supporting daily network operations and troubleshooting.
• Exposure to PCI DSS, vulnerability scanning, or audit processes is a plus.
• Familiarity with ITIL processes and ticketing systems.

Preferred Certifications

• Fortinet NSE 3–4 (strongly preferred)
• Palo Alto PCCSA / PCNSA
• Cisco CCNA
• ITIL Foundation (optional)
• Security or similar is a plus
• Any PCI‑related training or certification is beneficial

Soft Skills

• Strong troubleshooting mindset
• High attention to detail and accuracy
• Good communication and teamwork skills
• Ability to follow procedures and escalate when needed
• Customer‑focused and proactive attitude
• Willingness to learn advanced network and security concepts