- Company Name
- ITS Group Benelux
- Job Title
- Senior Network Security Engineer
- Job Description
-
**Job Title**
Senior Network Security Engineer
**Role Summary**
Design, deploy, and maintain secure IT/OT network infrastructure for a gas transmission and storage company operating across Belgium, France, UK, Germany, and Switzerland. Lead firewall, routing, switching, cloud connectivity, and automation initiatives while ensuring 24/7 availability and compliance with industry standards.
**Expectations**
- Deliver security‑centric networking solutions that meet operational and regulatory requirements.
- Act as a subject‑matter expert for the entire network stack, from LAN to WAN, data‑centre to cloud.
- Provide technical guidance and support to cross‑functional teams across multiple European sites.
- Participate in a standby rotation (≈1 week every 4 weeks) and respond to emergencies or change requests.
**Key Responsibilities**
- Implement and manage enterprise firewalls (Checkpoint mandatory, Palo Alto optional).
- Configure and troubleshoot routing and switching protocols (OSPF, ISIS, MST, BGP).
- Deploy and maintain Cisco ACI, SD‑WAN, ASR/ISR edge routers, Catalyst/Nexus switches, and Cisco wireless infrastructure.
- Automate configuration and provisioning using Python and Ansible.
- Integrate monitoring, NAC, TACACS+/RADIUS, central syslog, Zabbix, Elastic Stack, and ISE.
- Plan and execute network connectivity for new data centres and cloud services (Azure, AWS).
- Conduct network vulnerability assessments, hardening, and incident response.
- Collaborate with OT teams to ensure secure integration of process control systems.
- Perform change management, documentation, and peer‑review of technical designs.
- Provide training and knowledge transfer to junior engineers and operations staff.
**Required Skills**
*Technical*
- Extensive Checkpoint firewall expertise (installation, policy design, management).
- Proficient in routing/switching protocols (OSPF, ISIS, BGP, MSTP).
- Strong knowledge of Cisco technologies (ASR, ISR, Catalyst, Nexus, ACI, SD‑WAN, Wireless).
- Experience with Juniper (plus).
- Cloud networking (Azure, AWS) and SD‑WAN concepts.
- Python and Ansible automation.
- Monitoring/analytical tools – Zabbix, Elastic Stack, SIEM.
- TACACS+/RADIUS, NAC, ISE.
*Soft*
- Fluent in French or Dutch; strong English communication.
- Team player with independent initiative and problem‑solving mindset.
- Willingness to travel within Belgium and take standby shifts.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Technology, or related field.
- 3–5 years of professional networking and security experience.
- Relevant certifications preferred:
- Checkpoint Certified Security Administrator (CCSA) or equivalent.
- Cisco CCNP/CCNA Security or Cisco Certified Network Professional (CCNP).
- Palo Alto Networks Certified Network Security Engineer (PCNSE) or similar.
- Other cybersecurity or network certifications (e.g., OSCP, CISSP) welcome.