Senior Network Security Engineer – Firewall & Application Delivery Expertise (Firewall Security)

TL;DR

Senior Network Security Engineer – Firewall & Application Delivery Expertise (Firewall Security): Managing and evolving multi-vendor perimeter and application-delivery security infrastructure for a regulated financial services environment with an accent on firewalls, F5 BIG-IP, cloud networking, and automation. Focus on troubleshooting complex TLS, NAT, routing, and traffic flows, strengthening security baselines, and automating enterprise network platforms.

Location: Hybrid in Lisbon; candidates must already have the legal right to work in the European Union

Company

hirify.global provides technology and consulting services, placing this role with a financial services client operating under Swiss banking regulations.

What you will do

• Operate and enhance F5 BIG-IP platforms for load balancing, SSL offload, and web application security.
• Manage Palo Alto, Check Point, and Fortinet firewalls, including NAT, VPN, and high-availability configurations.
• Administer proxy, filtering, Infoblox DDI, and Azure network security components.
• Troubleshoot complex traffic, TLS/SSL, NAT, and routing issues through deep packet analysis.
• Automate network configuration through REST APIs, Ansible, Git, and related tooling.
• Maintain hardening baselines and runbooks, provide Level 2/3 support, and participate in on-call rotations.

Requirements

• At least 5 years of experience in perimeter security and application delivery.
• Strong hands-on experience with F5 BIG-IP, Palo Alto PAN-OS, Check Point, Fortinet FortiGate, web proxies, and DNS/DHCP/IPAM.
• Experience with Azure network security, REST APIs, scripting, and configuration automation.
• Understanding of security best practices, risk mitigation, incident response, and deep packet analysis.
• Bachelor’s degree in computer science, networking, or an equivalent field.
• Communicative English at B2–C1 level and existing EU work authorization are required.

Nice to have

• F5 AS3, Terraform, Panorama, FortiManager, Nautobot, or NetBox experience.
• Relevant vendor certifications such as PCNSE, CCSA/CCSE, or Fortinet NSE.
• Previous experience in regulated financial services environments.

Culture & Benefits

• Hybrid work based in Lisbon.
• High-autonomy work on enterprise-grade security infrastructure.
• Exposure to a multi-site, multi-datacenter environment with Swiss banking compliance requirements.
• Participation in a security-first culture and on-call support rotation.