Network Security Engineer

Key Responsibilities

• Design and implement automation solutions for network security operations.
• Automate the full firewall rule lifecycle , from creation and modification through to review and decommissioning.
• Develop automated security policy validation and control verification processes.
• Build compliance reporting and audit automation solutions.
• Develop API-based integrations between security and network management platforms.
• Build scripts and workflows using Python, PowerShell and Bash .
• Automate operational and security governance processes to reduce manual effort.
• Use Infrastructure as Code and configuration management tools to automate security controls.
• Troubleshoot, optimise and maintain automation workflows and integrations.
• Work with Network, Security, DevOps and Infrastructure teams to deliver automation initiatives.

What We're Looking For

• Strong experience in network security automation or security engineering automation.
• Experience automating firewall rule and policy management.
• Strong hands-on scripting experience with Python, PowerShell and/or Bash .
• Experience developing and integrating REST APIs .
• Experience with Ansible, Terraform and/or Chef .
• Understanding of Infrastructure as Code, configuration management and DevOps practices.
• Experience automating security governance, compliance or audit processes.
• Strong troubleshooting and problem-solving skills.
• Ability to work across Network, Security, Infrastructure and DevOps teams.
• Strong documentation and stakeholder communication skills.
• Desirable AlgoSec or equivalent firewall policy management platforms.
• Experience with Palo Alto, Check Point or other enterprise firewall technologies.
• Zero Trust, ZTNA, SASE or SSE experience.
• Network segmentation or SDN experience.
• Cloud and hybrid network security.
• Banking, financial services or other regulated-environment experience.
• Knowledge of PCI-DSS, ISO 27001, NIST or CIS Controls .
• Security certifications such as CISSP, CCNP Security, PCNSE, CCSP or GIAC.