Firewalling / Microsegmentation Engineer - M/F

Project overview

#StormYourCareer Join STORM GROUP and grow with us!

Lead the engineering of firewalling, microsegmentation, and network security for a major banking client.

As part of strengthening the Tech Foundation Pole's skills within the Network Integration Engineering team, we are looking for a Senior Network Security Engineer – Firewalling & Microsegmentation. At the heart of a dedicated squad, your role will be crucial and strategic: you will lead and manage all aspects related to next-generation firewalls, microsegmentation of hybrid and containerized environments (Kubernetes/NSX-T), L3 support, and Operational and Security Maintenance (MCO/MCS) in a demanding banking context.

Your Future Environment

You will work at the Guyancourt site (78), within the expertise domain operating on the group's network, security, and internet infrastructures. In constant interaction with the Network DE Lead, L2 operations teams, subsidiaries, and application teams, you will work in a hybrid setting (3 days per week on client site, 2 days remote). This is the ideal environment to work with the best market technologies (Fortinet, Palo Alto, NSX-T, Cilium), manage complex evolution projects, and ensure the high availability of perimeters subject to PCI-DSS and LPM standards (with on-call duties and out-of-hours interventions).

Your Key Missions

Engineering, Microsegmentation & Projects (BUILD & ARCHITECTURE Mode):

MCO/MCS, L3 Support & Skills Transfer (RUN & PROCESS Mode):

• Lead technical project management: scoping, proposing economically viable solutions, preparing quotes (day-rate costing), and associated configurations.
• Design, deploy, and maintain microsegmentation policies on VMware NSX-T, Guardicore platforms, and within Kubernetes clusters (CNI Cilium).
• Deploy and evolve multi-vendor firewall architectures (Fortinet, Palo Alto, Checkpoint, Forcepoint).
• Support infrastructure evolutions for the group's various subsidiaries, address hardware/software obsolescence, and manage the vulnerability remediation plan.
• Write and validate all technical documentation deliverables (Technical Architecture Documents
• DAT, Operational Documents
• DEX, security guidelines).
• Develop automation scripts for rules and digital certificate management.
• Ensure the Operational and Security Maintenance (MCO/MCS) of the overall firewalling and network security environment.
• Handle diagnostics and resolution of complex Level 3 (L3) incidents.
• Support, train, and assist the L2 operations team on a daily basis.
• Rigorously apply ITIL processes and consider banking regulatory constraints (PCI-DSS, LPM).
• Participate in the on-call rotation and carry out planned interventions outside of working hours (HNO).

Requirements

Your Assets

Our Benefits

5 Reasons to Join Us

Our Selection Process

Ready to join a team of committed experts? Don't hesitate, join the Storm Team!

Storm Group fosters an inclusive and multicultural culture where diversity of profiles fuels our collective intelligence. By joining the Storm Team, you become part of a committed ecosystem that places the development of your talents at the heart of its strategy, while actively contributing to solidarity and reducing environmental impact, both within our offices and in the large-scale projects we undertake for our clients.

Work Environment

Storm Group is a consulting firm specializing in the transformation of Information Systems and Organizations. We support our clients across the entire IT value chain, from expert sourcing to strategic consulting and software engineering.

Our clientele primarily consists of major players in banking, insurance, and finance, for whom we mobilize rigorously selected consultants for their most strategic projects.

• Education: Engineering degree or Master's degree (Bac+5) in IT, networks & telecoms, or cybersecurity.
• Experience: You have solid and confirmed experience of 5 to 8 years (Senior level) in network security engineering and production in complex large-account environments (banking or financial sector strongly appreciated).
• Imperative Technical Expertise in Security & Network:
• In-depth mastery of reference firewalls: Fortinet (FortiGate), Palo Alto Networks, Checkpoint, Forcepoint.
• Confirmed expertise in microsegmentation: VMware NSX-T, Akamai/Guardicore, and Kubernetes container security (CNI Cilium).
• Very good skills in perimeter security: Reverse Proxy, Proxy, WAF.
• Solid knowledge of network protocols and equipment: LAN, WAN, MPLS, VPN, Switching, Routing, Load Balancers.
• Scripting and automation skills (Python, Bash, Ansible) and certificate lifecycle management.
• Behavioral Skills & Languages:
• Synthesis skills, engineering rigor, curiosity, and strong ability to manage stress in critical contexts.
• Excellent interpersonal skills, client-oriented posture, and a strong team spirit.
• Fluent professional English required (technical exchanges and international documentation).
• Excellence in Modern Microsegmentation: Ability to secure East-West traffic on both classic virtual infrastructures (NSX-T) and Kubernetes pods (Cilium).
• Technical Leadership and Support: Pleasure in upskilling L2 teams through pedagogy and structured procedures.
• Sense of Operational Commitment: Calmness and method during on-call interventions or out-of-hours windows.
• Public transport pass reimbursement at 75%.
• Meal vouchers subsidized by STORM GROUP at 50% (€10.5 / day).
• Gymlib / Wellpass access (sports and well-being).
• Health / Provident Fund insurance plan with Alan.
• Continuous training: Access to Udemy Business and support for certifications (NSE 4/7 Fortinet, PCNSE Palo Alto, VCP-NV / NSX-T, CKA Kubernetes, ITIL v4).
• Referral bonus, profit-sharing, and participation bonuses.
• Work rhythm: 3 days per week on client site in Guyancourt (hybrid mode) with on-call duties and out-of-hours interventions. Start date ASAP.
• Tailored Career Path: Co-create a unique professional trajectory, adapted to your ambitions.
• Strategic Missions: Work on large-scale projects, perfectly aligned with your expertise.
• Dedicated Follow-up: Benefit from structured annual reviews to ensure your continuous progress.
• Continuous Excellence: Develop your skills daily within a demanding ecosystem.
• Sustainable Performance: Grow in an environment where business demands respect your work-life balance.
• Introductory call with a recruiter.
• Technical interview with in-depth technical assessment (Practical case on Fortinet/Palo Alto firewall rules, definition of microsegmentation policies under NSX-T/Cilium, resolution of an L3 incident in a banking environment, and costing of an evolution study).
• Final meeting to validate fit and project outlook.

Project details

• Start: ASAP
• Duration: 1 mois
• Remote: hybrid
• Location: 75002, Paris, Île-de-France, FR
• Languages: French