2,041,069open jobs
120,323companies
253,417added this week
Browse all
Location
In office (Bucharest)

Confirmed on the employer's own hiring board on Oct 28, 2026. First seen by Alion on Oct 28, 2026.

Overview
Company
Impact
Profile match
Stefanini EMEA is the Europe, Middle East and Africa arm of Stefanini Group, the Brazilian IT services and technology consulting company, and this Romanian-domain record covers its regional operation centred on a large delivery hub in Bucharest. The group has worked for more than 35 years in over 40 countries, providing IT outsourcing, service desk, application development, cloud and cybersecurity services to clients in manufacturing, finance and telecom. Its EMEA board hires multilingual support engineers, onsite and deskside IT technicians, security and incident response engineers, developers and delivery managers.

Network Security Engineer

We are seeking an experienced Network Security Engineerspecializing in Cyber Securityand enterprise firewall policy governanceacross hybrid IT/OT environments.

This role supports a strategic network security initiative and is expected to continue through Q2 2026.

You will be responsible for defining, reviewing, and enforcing network traffic controls across Palo Alto Networks, FortiGate, mGuard, and AWS security services.

Working closely with infrastructure, cloud, OT, and application teams, you will help enable secure connectivity by translating business and application requirements into compliant firewall policies while ensuring adherence to security standards and network segmentation principles.

The position is available for a six-month period.

Key Responsibilities:

  • Manage the complete firewall rule lifecycle, including request intake, risk assessment, approvals, implementation, validation, and periodic recertification.
  • Administer and govern security policies across:
    • Palo Alto Networks Firewalls(Security Policies, NAT, App-ID, Zone-Based Enforcement)
    • Phoenix Contact mGuard Firewalls(OT Segmentation, Traffic Filtering, Inbound and Outbound Rule Enforcement)
    • Meraki and SD-WAN Edge Devices(Access Control Lists)
  • Lead initiatives to define and implement ingress and egress traffic governance processes, ensuring alignment with approved connectivity requirements and security intelligence.
  • Analyze traffic flows and assess exposure risks across enterprise, cloud, and operational technology (OT) environments.
  • Implement and maintain security controls across Palo Alto Networks, Fortinet FortiGate, Phoenix Contact mGuard, and AWS security services.
  • Collaborate with infrastructure, cloud, OT, and application teams to ensure secure, least-privilege network connectivity.
  • Support threat mitigation initiatives through IP block list management, exposure reduction activities, and security policy enforcement.
  • Conduct firewall rule reviews, cleanup initiatives, and compliance assessments to reduce the organizational attack surface.
  • Troubleshoot connectivity and security issues while maintaining compliance and security requirements.

What We're Looking For:

  • Proven experience with Firewall Rule Governance & Lifecycle Management.
  • Strong understanding of Ingress/Egress Traffic Enforcementand Network Segmentationprinciples.
  • Hands-on experience with Palo Alto Networks NGFWand Fortinet FortiGateplatforms.
  • Experience configuring and supporting Phoenix Contact mGuardfirewalls within OT environments.
  • Knowledge of AWS security services, including:
    • Security Groups
    • Network ACLs (NACLs)
    • Web Application Firewall (WAF)
    • Application Load Balancers (ALB)
    • Network Load Balancers (NLB)
  • Experience with NAT design and policy enforcement.
  • Understanding of OT/ICS Network Securityconcepts and best practices.
  • Ability to perform risk assessmentsand contribute to secure network architecture designs.
  • Experience supporting Security Operations, incident response activities, and exposure reduction initiatives.
  • Strong troubleshooting and stakeholder management skills, with the ability to work effectively across infrastructure, cloud, application, and OT teams.

What"s next:

It"s best to apply today, because job postings can be taken down and we wouldn"t want you to miss this opportunity. In case you need further information, just send us a message at [email protected] and we"ll be happy to assist!

The preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.

Diversity & Inclusion

Here at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!

About us

We are a Brazilian company with over 35 years of experience in delivering IT services worldwide, ranging from IT outsourcing to application development or IT staffing. We have a direct presence in 41 countries, through our 70 offices located throughout the world. We have managed to become the preferred partner of many small-to-midsize local and regional companies as well. Most of our clients come from industries such as financial services, manufacturing, telecommunications, chemical, services, technology, public sector and utilities.

Stefanini has career opportunities locally and around the world for professionals interested in a vibrant, passionate, team-oriented workplace. If you are a customer-centric person with a "get it done" attitude, come over for coffee and a talk on your future career with us! Learn more about us on www.stefanini.com and join us on LinkedIn, Facebook and Instagram where we regularly post insights from our colleagues.

We want to inform you that there are currently scams targeting job seekers by falsely using our company"s name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.

Please remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.

If you suspect you"ve been targeted, please contact us immediately at [email protected] for verification.

Key Points to Remember:

* Legitimate job offers only follow interviews conducted with our hiring managers or clients.

* We will never ask for payment at any stage of the recruitment process.

Stay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.

What We're Looking For:

  • Proven experience with Firewall Rule Governance & Lifecycle Management.
  • Strong understanding of Ingress/Egress Traffic Enforcementand Network Segmentationprinciples.
  • Hands-on experience with Palo Alto Networks NGFWand Fortinet FortiGateplatforms.
  • Experience configuring and supporting Phoenix Contact mGuardfirewalls within OT environments.
  • Knowledge of AWS security services, including:
    • Security Groups
    • Network ACLs (NACLs)
    • Web Application Firewall (WAF)
    • Application Load Balancers (ALB)
    • Network Load Balancers (NLB)
  • Experience with NAT design and policy enforcement.
  • Understanding of OT/ICS Network Securityconcepts and best practices.
  • Ability to perform risk assessmentsand contribute to secure network architecture designs.
  • Experience supporting Security Operations, incident response activities, and exposure reduction initiatives.
  • Strong troubleshooting and stakeholder management skills, with the ability to work effectively across infrastructure, cloud, application, and OT teams.

What"s next:

It"s best to apply today, because job postings can be taken down and we wouldn"t want you to miss this opportunity. In case you need further information, just send us a message at [email protected] and we"ll be happy to assist!

The preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.

Diversity & Inclusion

Here at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!

About us

We are a Brazilian company with over 35 years of experience in delivering IT services worldwide, ranging from IT outsourcing to application development or IT staffing. We have a direct presence in 41 countries, through our 70 offices located throughout the world. We have managed to become the preferred partner of many small-to-midsize local and regional companies as well. Most of our clients come from industries such as financial services, manufacturing, telecommunications, chemical, services, technology, public sector and utilities.

Stefanini has career opportunities locally and around the world for professionals interested in a vibrant, passionate, team-oriented workplace. If you are a customer-centric person with a "get it done" attitude, come over for coffee and a talk on your future career with us! Learn more about us on www.stefanini.com and join us on LinkedIn, Facebook and Instagram where we regularly post insights from our colleagues.

We want to inform you that there are currently scams targeting job seekers by falsely using our company"s name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.

Please remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.

If you suspect you"ve been targeted, please contact us immediately at [email protected] for verification.

Key Points to Remember:

* Legitimate job offers only follow interviews conducted with our hiring managers or clients.

* We will never ask for payment at any stage of the recruitment process.

Stay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
2,041,069 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Bucharest
≈ $17k – $47k per year (Estimated) · In office · Romania
Apply
DevSecOps Engineer 10 hours ago
≈ $32k – $73k per year (Estimated) · In office · 5+ years exp · Bachelor's Degree · Cluj-Napoca
Python
PowerShell
DevOps
Splunk
Terraform
GCP
Azure DevOps
GitHub Actions
CloudFormation
Datadog
Dynatrace
Prometheus
GitLab CI
Azure
CI/CD
Jenkins
AWS
Docker
Kubernetes
Grafana
Configuration Management
Bicep
Incident Management
IAM
Cybersecurity
Zero Trust
Apply
≈ $16k – $44k per year (Estimated) · In office · High School Diploma · Romania
DevOps
Azure
IAM
TCP/IP
Cybersecurity
Microsoft Defender
Management
Jira
ServiceNow
Apply
≈ $31k – $70k per year (Estimated) · Remote (Romania) · Full-Time · 5+ years exp · Bucharest
DevOps
IAM
Linux
VPN
Cybersecurity
SIEM
Apply
DevSecOps Engineer 30 days ago
$250k – $266k per year · In office · Contractor · Cheltenham
DevOps
OpenShift
CI/CD
Docker
Kubernetes
Linux
Apply
≈ $47k – $114k per year (Estimated) · In office · Full-Time · 3+ years exp · Gratkorn · Bucharest · Glasgow
Cybersecurity
CVE
Management
Scrum
Apply
In office · Full-Time · Bucharest
Apply
Rust Engineer 7 hours ago
≈ $34k – $85k per year (Estimated) · In office · Full-Time · 5+ years exp · Bucharest
Java
Rust
TypeScript
SQL
Databases
PostgreSQL
Apache Iceberg
Trino
AI/ML
Spark
DevOps
Kubernetes
Apply
≈ $20k – $47k per year (Estimated) · Hybrid · Full-Time · 3+ years exp · Master's Degree · Bucharest
Python
SQL
Apply
≈ $28k – $77k per year (Estimated) · Hybrid · 5+ years exp · Bucharest
Python
PowerShell
Bash
DevOps
Terraform
Ansible
GCP
Helm
Chef
Datadog
Dynatrace
Prometheus
Azure
Jenkins
Git
AWS
Docker
Kubernetes
Grafana
Octopus Deploy
Linux
Windows
Apply
See all jobs
This is one of many
2,041,069 more open roles from verified company boards, updated every day.