Network and Security Engineer

Do you have 5 years of proven experience as a network engineer in complex, large-scale IT environments? We are looking for a new colleague to join our team in Brussels.

Requirements:

• 5 years of proven experience as a network engineer in complex, large-scale IT environments.
• Experience with network segmentation and the implementation of secure internet services in large financial organizations.
• Ability to translate high-level security policies into concrete architectural components and procedures.
• Autonomous work style with the ability to function within a multidisciplinary team.
• Strong documentation, organization, and presentation skills.
• Palo Alto PanOS: Experience with data center firewall clusters (IDS/IPS, decryption, sandboxing) and dynamic routing protocols. PCNSE certification is expected.
• Cisco: In-depth knowledge of Umbrella, WIFI, Cisco ISE, and IPSec.
• Algosec: In-depth knowledge of Algosec (Firewall Analyzer and Fireflow) and its integration with SNOW.
• Automation: Knowledge of Terraform, Gitlab, and Ansible.
• Excellent knowledge of network protocols, including IPv4/IPv6, HTTP(S), FTP(S), SMTP, SSH, SSL/TLS, and dynamic routing protocols like BGP.
• Knowledge of high-availability protocols such as HSRP and VRRP.
• Language(s): English (fluent), French (fluent), Dutch (fluent)

Job description:

• Network Architecture: Master and progressively evolve the NBB's secure network architecture.
• Daily Configuration: Configure various network security devices, including installations, upgrades, patching, and coding firewall rules.
• Troubleshooting and Analysis: Resolve network security device failures and address issues with application flows.
• Communication: Represent the network group in technical meetings, work within a multidisciplinary team, and provide clear reports to managers and stakeholders.
• Technical Writing: Create and maintain technical manuals, procedure descriptions, and project documentation.
• Advanced Collaboration: At a later stage, you will collaborate on organizing the segmentation of the internal network and designing secure, internet-facing application services.