Network Security Engineer

Project overview

Job Title: Network Security Engineer

Reference: 26-04-5762-001

Responsibilities

Education:

Primary Skills:

Important Skills:

• Design, deploy, and maintain network security solutions (firewalls, VPN, IPS, reverse proxies, web proxies, PAM, network segmentation, etc.).
• Participate in the definition and implementation of network security policies.
• Analyze security events and contribute to incident response.
• Identify vulnerabilities and propose corrective measures.
• Participate in infrastructure architecture, transformation, and migration projects.
• Automate administration and security tasks when relevant.
• Ensure technological watch on threats, vulnerabilities, and new cybersecurity solutions.
• Document architectures, procedures, and configurations.
• University Master's degree in Computer Science, EPF Engineering diploma, or equivalent.
• CISSP, Cisco, Check Point, Palo Alto, F5, and Fortinet certifications are highly appreciated.
• 8+ years of experience in networking and cybersecurity, ideally in complex, critical, or highly regulated environments.
• Excellent command of TCP/IP, UDP, DNS, DHCP, ARP, ICMP, and HTTP/HTTPS protocols.
• Expertise in at least one Next Generation Firewall (NGFW) solution such as Palo Alto Networks, Fortinet, or Check Point.
• Expertise in the design, administration, and troubleshooting of network security solutions, including filtering policies, NAT/PAT, segmentation, security zones, and flow control.
• Excellent ability to analyze network traffic and resolve complex incidents using tools such as Wireshark, tcpdump, and network diagnostic tools.
• Experience in analyzing, qualifying, and resolving network security incidents, including in critical environments.
• Ability to produce and maintain architecture documentation, network diagrams, operating procedures, and technical files.
• Experience administering solutions such as F5 Reverse Proxy, Cisco ISE, and Infoblox DDI.
• Experience automating network and security operations using Python, Ansible, and REST APIs.
• Mastery of routing protocols.

Nice to have

Required Qualities:

• Knowledge of Cisco ACI, VMware NSX, and VXLAN/EVPN technologies.
• Knowledge of a workflow automation tool, such as n8n.
• Analytical mindset and ability to investigate methodically.
• Ability to work in a team and share knowledge.
• Good writing skills and ease of expression in oral and written communication.
• High degree of autonomy, exemplary rigor, and pragmatism.
• Ability to work under pressure during incident situations.

Project details

Geneva

Desired Start Date: 01/15/2027

100%

Compensation: from 149,000 CHF / year

Job Description and Context:

We are looking for a network security engineer for a client, a public administration in Geneva, to strengthen its network team. This team ensures connectivity between workstations, telephones, servers, and all connected objects, as well as communications with external partners and the Internet, while ensuring internal and perimeter security.

The successful candidate will ensure the reliability and performance of the network across five closely related domains: the shared metropolitan network (MPLS), networks for several hundred sites and several datacenters, network services (NTP, DNS, DHCP, etc.), interconnections with partner networks and internal connectivity, as well as network security elements (firewalls, IPS, reverse proxies, web proxies, VPN, PAM, etc.). Long-term assignment (up to 5 years).

• Start: flexible
• Location: Geneva, Geneva, CH
• Languages: French