Senior Network Security Engineer – Firewall & Application Delivery Expertise

Empower security at the forefront — master the art of safeguarding complex network architectures!

Hybrid opportunity based in Lisbon

As a Senior Network Security Engineer – Firewall & Application Delivery Expertise, you will work for our client, a leading financial services organization operating under Swiss banking regulations. You will be responsible for managing and evolving a multi-vendor perimeter and application-delivery security estate across multiple sites and datacenters, ensuring robust, automated, and compliant security solutions. This role offers a unique chance to contribute to enterprise-grade security infrastructure while advancing your expertise within a high-autonomy environment.

Your main responsibilities:

• Operate and enhance F5 BIG-IP platforms, including load balancing, SSL offload, and web application security modules
• Manage next-generation firewalls such as Palo Alto and Check Point, handling NAT, VPNs, and high availability configurations
• Administer Fortinet FortiGate devices within a multi-vendor estate, ensuring optimal performance and security
• Oversee proxy and filtering solutions, including Symantec/Broadcom ProxySG, with a focus on SSL inspection and traffic management
• Maintain Infoblox DDI (DNS, DHCP, IPAM), exemplifying best practices in IP security and zone management
• Manage Azure network connectivity and security components like ExpressRoute, VNet, Azure Firewall, and VPN Gateway
• Troubleshoot complex traffic, TLS/SSL, NAT, and routing issues end-to-end through deep packet analysis
• Automate platform configurations using vendor REST APIs, Ansible, and version control systems (Git)
• Develop and update hardening baselines, runbooks, and change documentation
• Provide escalated support (Level 2/3), partake in on-call rotations, and contribute to a security-first culture

You’re ideal for this role if you have:

• At least 5 years of experience in perimeter security and application delivery
• Strong proficiency with F5 BIG-IP, Palo Alto PAN-OS, Check Point, Fortinet FortiGate, and related security tools
• Hands-on experience with web proxies, DNS/DHCP/IPAM, and Azure network security
• Expertise in automating network configurations via REST APIs and scripting
• Solid understanding of security best practices, risk mitigation, and incident response
• Bachelor's degree in computer science, networks, or an equivalent field
• Vendor certifications (e.g., Palo Alto PCNSE, Check Point CCSA/CCSE, Fortinet NSE) are valued

It is a strong plus if you have:

• Knowledge of declarative configuration tools like F5 AS3 or Terraform
• Experience with centralized management systems (e.g., Panorama, FortiManager)
• Familiarity with Source-of-Truth concepts such as Nautobot or NetBox
• Previous work in a regulated environment, especially in financial services

Language required for the role:

• Communicative English (B2-C1 level)

Eligibility for the role:

• Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.