Job Opportunity: Senior Network Security Engineer
Location: Zurich Metropolitan Area
Employment Type: Permanent, on-site

About the Role
Conexus is seeking a Senior Network Security Engineer to join our esteemed client as part of their expanding global team. This is an exciting opportunity to contribute to cutting-edge projects focused on Cisco-based network security architecture.

Role Overview:
You will be responsible for the architecture, deployment, and management of Firewall solutions across a variety of environments. You will work closely with other IT security experts to ensure that our network infrastructure is protected with the latest security technologies and best practices.

Key Responsibilities:

• Design and implement secure Firewall architectures to safeguard the network perimeter and internal systems.
• Oversee the configuration, maintenance, and optimization of Firewalls (including next-generation Firewalls).
• Develop and enforce Firewall policies, including access control rules and traffic filtering to protect against unauthorized access.
• Conduct regular vulnerability assessments and security audits to identify and resolve any Firewall weaknesses or misconfigurations.
• Collaborate with network engineers and security teams to integrate Firewall solutions with other security technologies, such as intrusion detection systems (IDS) and VPNs.
• Troubleshoot and resolve Firewall-related issues, ensuring minimal disruption to business operations.
• Continuously monitor network traffic and Firewall logs for signs of malicious activity, responding proactively to security incidents.
• Stay informed of emerging Firewall technologies and best practices to maintain and improve security posture.
• Document Firewall configurations, changes, and security procedures for compliance and audit purposes.

What We're Looking For:

• Proven experience as a Network Security Engineer or in a similar role, with extensive knowledge of Firewall technologies and network security.
• Strong hands-on experience with Firewall platforms such as Cisco ASA, Palo Alto Networks, Fortinet, Check Point, or Juniper SRX.
• Deep understanding of network security protocols, including TCP/IP, IPsec, SSL, and DNS filtering.
• Familiarity with network security tools and technologies like IDS/IPS, SIEM, and VPN solutions.
• Experience in designing and implementing security policies, access control lists (ACLs), and NAT (Network Address Translation).
• In-depth knowledge of security best practices, compliance standards, and regulatory frameworks (eg, PCI DSS, ISO 27001, NIST).
• Relevant certifications such as CISSP, CCNP Security, Palo Alto Networks ACE, or equivalent are highly desirable.