Network / Internet Security Engineer - M/F

Project overview

#StormYourCareer Join STORM GROUP and grow with us!

Drive firewalling, microsegmentation, and network security engineering for a major banking client.

As part of strengthening the Tech Foundation Pole's skills within the Network Integration Engineering team, we are looking for a Senior Network and Internet Security Engineer. At the heart of a dedicated squad, your role will be crucial and strategic: you will lead and handle all topics related to next-generation firewalls, microsegmentation of hybrid and containerized environments (Kubernetes/NSX-T), N3 support, and Operational and Security Maintenance (MCO/MCS) in a demanding banking context.

Your Future Environment

You will primarily work at the Rodez site (with the possibility of switching or intervening in Saint-Quentin-en-Yvelines / SQY later), within the expertise domain operating on the group's network, security, and Internet infrastructures. Constantly interacting with the Network DE Lead, N2 operations teams, subsidiaries, and application teams, you will work in a hybrid setup (3 days per week on client site, 2 days remote).

This is the ideal environment to work with the best technologies on the market (Fortinet, Palo Alto, NSX-T, Cilium), manage complex evolution projects, and ensure the high availability of perimeters subject to PCI-DSS and LPM standards (with on-call duties and out-of-hours interventions).

Your Key Missions

Engineering, Microsegmentation & Projects (BUILD & ARCHITECTURE Mode):

MCO/MCS, N3 Support & Skills Transfer (RUN & PROCESS Mode):

• Lead technical project management: scoping, proposing solutions that meet needs (economically viable), preparing quotes (man-day costing) and associated configurations.
• Design, deploy, and maintain microsegmentation policies on VMware NSX-T, Guardicore platforms, and within Kubernetes clusters (CNI Cilium).
• Deploy and evolve multi-vendor firewall architectures (Fortinet, Palo Alto, Checkpoint, Forcepoint).
• Support infrastructure evolutions for the group's various subsidiaries, handle hardware/software obsolescence, and manage the vulnerability remediation plan.
• Draft and validate all technical documentation deliverables (Technical Architecture Documents
• DAT, Operational Documents
• DEX, security guidelines).
• Develop scripts for automating network rules and manage the lifecycle of digital certificates.
• Ensure the Operational and Security Maintenance (MCO/MCS) of the overall firewalling and network/Internet security environment.
• Handle diagnostics and resolution of complex Level 3 (N3) incidents.
• Support, train, and assist the Level 2 operations team on a daily basis.
• Rigorously apply ITIL processes and consider banking regulatory constraints (PCI-DSS, LPM).
• Participate in the on-call rotation and carry out planned interventions outside of working hours (HNO).

Requirements

Your Assets

Our Benefits

5 Reasons to Join Us

Our Selection Process

Ready to join a team of committed experts? Don't hesitate, join the Storm Team!

Storm Group encourages an inclusive and multicultural culture where diversity of profiles fuels our collective intelligence. By joining the Storm Team, you become part of a committed ecosystem that places the development of your talents at the heart of its strategy, while actively contributing to solidarity and reducing environmental impact, both within our offices and in the large-scale projects we undertake for our clients.

Work Environment

Storm Group is a consulting firm specializing in the transformation of Information Systems and Organizations. We support our clients across the entire IT value chain, from expert sourcing to strategic consulting and software engineering.

Our clientele primarily consists of major players in banking, insurance, and finance, for whom we mobilize rigorously selected consultants for their most strategic projects.

• Education: Engineering degree or Master's degree (Bac+5) in IT, networks & telecoms, or cybersecurity.
• Experience: You have solid and confirmed experience of 5 to 8 years (Senior level) in network security engineering and production in complex large-account environments (banking or financial sector strongly appreciated).
• Imperative Technical Expertise in Security & Network:
• In-depth mastery of reference firewalls: Fortinet (FortiGate), Palo Alto Networks, Checkpoint, Forcepoint.
• Confirmed expertise in microsegmentation: VMware NSX-T, Akamai/Guardicore, and Kubernetes container security (CNI Cilium).
• Very good skills in perimeter & Internet security: Reverse Proxy, Proxy, WAF.
• Solid knowledge of network protocols and equipment: LAN, WAN, MPLS, VPN, Switching, Routing, Load Balancers.
• Skills in scripting and automation (Python, Bash, Ansible) and certificate lifecycle management.
• Behavioral Skills & Languages:
• Synthesis skills, engineering rigor, curiosity, and strong ability to manage stress in critical contexts.
• Excellent interpersonal skills, client-oriented posture, and a strong team spirit.
• Fluent professional English required (technical exchanges and international documentation).
• Excellence in Modern Microsegmentation: Ability to secure East-West traffic on both classic virtual infrastructures (NSX-T) and Kubernetes pods (Cilium).
• Technical Leadership and Support: Pleasure in upskilling Level 2 teams through pedagogy and structured procedures.
• Sense of Operational Commitment: Calmness and method during on-call interventions or out-of-hours windows.
• Public transport pass reimbursement at 75%.
• Meal vouchers subsidized by STORM GROUP at 50% (€10.5 / day).
• Gymlib / Wellpass access (sports and well-being).
• Health / Provident Fund insurance with Alan.
• Continuous training: Access to Udemy Business and support for certifications (NSE 4/7 Fortinet, PCNSE Palo Alto, VCP-NV / NSX-T, CKA Kubernetes, ITIL v4).
• Co-optation bonus, profit-sharing, and participation bonus.
• Work rhythm: 3 days per week on client site in Rodez (or SQY later) in hybrid mode, with on-call duties and out-of-hours interventions. Desired start ASAP.
• Tailored Career Path: Co-create a unique professional trajectory adapted to your ambitions.
• Strategic Missions: Participate in large-scale projects, perfectly aligned with your expertise.
• Dedicated Follow-up: Benefit from structured annual reviews to ensure your continuous progress.
• Continuous Excellence: Develop your skills daily within a demanding ecosystem.
• Sustainable Performance: Evolve in an environment where business demands respect your work-life balance.
• Introductory call with a recruiter.
• Technical interview with in-depth technical assessment (Practical case on Fortinet/Palo Alto firewall rules, definition of microsegmentation policies under NSX-T/Cilium, resolution of an N3 incident in a banking environment, and costing of an evolution study).
• Final meeting to validate fit and project outlook.

Project details

• Start: ASAP
• Duration: 1 mois
• Remote: hybrid
• Location: 75002, Paris, Île-de-France, FR
• Languages: French