Principal Cybersecurity Engineer

• Long-term career opportunity
• Hybrid working model with 2-3 office days per week
• Occasional travel to customer locations across Europe
• Cafeteria package
• Medical insurance

• Vibrant working culture featuring an office gym, internal sports clubs, and an inclusive international team.

Responsibilities

• Lead the end-to-end design, implementation, and lifecycle management of enterprise firewalls, including Palo Alto PAN-OS, Check Point Gaia, Fortinet, and Cisco Secure Firewall (FTD/FMC).
• Architect and operate Cisco (IOS/NX-OS) and Arista (EOS/CloudVision) switching and routing infrastructure, including BGP, OSPF, VXLAN/EVPN, and segment routing across multi-site data centers.
• Architect and optimize enterprise proxy, WAF, and load-balancing solutions, including Zscaler ZIA/ZPA, Blue Coat, HAProxy, NGINX, and F5 BIG-IP/ASM.
• Design and enforce security posture for containerized workloads on OpenShift and Kubernetes using Cilium/eBPF network policies.
• Build and own Infrastructure as Code (IaC) automation frameworks using Ansible, Terraform, Python, and Bash.
• Architect SIEM logging pipelines (Splunk, CRIBL, XSOAR) and partner with SOC leadership on detection engineering maturity.
• Establish observability frameworks across the security stack using Prometheus, Grafana, and Zabbix.
• Act as a senior technical authority and escalation point, mentoring engineers and performing architecture reviews for critical network and security initiatives.
• Define and enforce Linux system hardening baselines (CIS Benchmarks) across hybrid infrastructure environments.
• Drive the design and governance of secure network architectures across on-premises, cloud, and containerized environments, ensuring scalability, resilience, and compliance.

Requirements

• 10+ years of demonstrable, hands-on experience in cybersecurity or network security engineering within regulated enterprise environments.
• Expert-level mastery of enterprise firewall platforms, HA clustering, and threat prevention architecture.
• Extensive experience with Cisco and Arista network routing, switching, and VXLAN/EVPN fabrics.
• Deep proficiency in Linux system administration, hardening, and enterprise automation (Ansible, Terraform, Python).
• Mastery of core protocols (DNS, HTTP/S, BGP, OSPF, VXLAN, IPsec) and perimeter defense controls.
• Excellent technical documentation, audit presentation, and stakeholder communication abilities.
• 5+ years of work experience with Python (Programming Language)
• 3+ years of work experience with Spring Framework