Network Security Engineer

Join a large-scale transformation program within the energy sector, focused on building a cloud-native internal developer platform (EDP). The platform enables software teams to efficiently develop, deploy, and operate applications through self-service capabilities across hybrid cloud environments (private and public cloud).

You will be part of the Infrastructure & Security Engineering area, responsible for designing, implementing, and continuously improving secure, scalable infrastructure services.

Project information:

• Location: 50% onsiteFrankfurt am Main, 50% remote
• Type of employment: B2B contract
• Project language:English

Responsibilities:

• Design and implement secure infrastructure solutions in line with architectural and operational requirements
• Develop and execute detailed security deployment plans, including timelines, phases, and required resources
• Configure and deploy security solutions, ensuring alignment with best practices and defined security standards
• Build and maintain script-based and automated security implementations to improve efficiency and reduce manual errors
• Create and maintain comprehensive technical documentation, including configurations, protocols, and decision rationale
• Continuously update documentation to reflect system changes and improvements
• Monitor and validate implementation processes to ensure effectiveness and alignment with organizational goals
• Identify gaps, inefficiencies, and risks, and propose corrective and optimization actions
• Collaborate with Architects, DevOps teams, and other stakeholders to ensure a security-by-design approach
• Support auditability and compliance by maintaining clear documentation and process traceability

Requirements:

• Senior-level experience in Security Engineering and Delivery within enterprise and large-scale data center environments
• Strong expertise in designing secure network architectures (LAN/WAN, Zero Trust, network segmentation/micro-segmentation)
• Proven experience leading security assessments, projects, and policy development
• Hands-on experience with network security technologies:
  • Firewalls (Palo Alto, Checkpoint, Fortinet, Cisco)
  • IDS/IPS, NAC, proxies, VPNs
  • Load balancers (F5, A10, Radware)
  • SD-WAN, DDoS protection, SASE
  • Network virtualization (VXLAN/EVPN, SDN, ACI, NSX)
• Strong troubleshooting and network performance optimization skills
• Solid knowledge of DNS architecture and experience with:
  • Infoblox or similar platforms
  • Linux-based DNS (e.g., BIND)
  • Enterprise/hybrid DNS management
• Experience with automation (Ansible) and scripting (Python)
• Familiarity with security and compliance standards (ISO 27001, NIST, GDPR, SOC2)
• Experience working in cross-functional environments with multiple stakeholders
• Fluent English (C1 or higher)

We offer:

• Private medical care with dental care (covering 70% of costs). Family package option possible
• Multisport card (also for an accompanying person)
• Life insurance
• Work with talented engineers on large-scale, technically challenging projects