{"id":3416030,"url":"https://alion.io/job/stefanini-emea-network-security-engineer","title":"Network Security Engineer","company":{"id":4425653,"name":"Stefanini EMEA","domain":"stefanini.ro","url":"https://alion.io/company/stefanini-ro","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartSearch","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"FortiGate","optional":false},{"name":"Least Privilege","optional":false}],"status":"live","first_seen_at":"2026-10-28T12:00:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-29T17:03:36Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Network Security Engineer\nWe are seeking an experienced Network Security Engineerspecializing in Cyber Securityand enterprise firewall policy governanceacross hybrid IT/OT environments.\nThis role supports a strategic network security initiative and is expected to continue through Q2 2026.\nYou will be responsible for defining, reviewing, and enforcing network traffic controls across Palo Alto Networks, FortiGate, mGuard, and AWS security services.\nWorking closely with infrastructure, cloud, OT, and application teams, you will help enable secure connectivity by translating business and application requirements into compliant firewall policies while ensuring adherence to security standards and network segmentation principles.\nThe position is available for a six-month period.\nKey Responsibilities:\nManage the complete firewall rule lifecycle, including request intake, risk assessment, approvals, implementation, validation, and periodic recertification.\nAdminister and govern security policies across:Palo Alto Networks Firewalls(Security Policies, NAT, App-ID, Zone-Based Enforcement)\nPhoenix Contact mGuard Firewalls(OT Segmentation, Traffic Filtering, Inbound and Outbound Rule Enforcement)\nMeraki and SD-WAN Edge Devices(Access Control Lists)\n\nLead initiatives to define and implement ingress and egress traffic governance processes, ensuring alignment with approved connectivity requirements and security intelligence.\nAnalyze traffic flows and assess exposure risks across enterprise, cloud, and operational technology (OT) environments.\nImplement and maintain security controls across Palo Alto Networks, Fortinet FortiGate, Phoenix Contact mGuard, and AWS security services.\nCollaborate with infrastructure, cloud, OT, and application teams to ensure secure, least-privilege network connectivity.\nSupport threat mitigation initiatives through IP block list management, exposure reduction activities, and security policy enforcement.\nConduct firewall rule reviews, cleanup initiatives, and compliance assessments to reduce the organizational attack surface.\nTroubleshoot connectivity and security issues while maintaining compliance and security requirements.\nWhat We're Looking For:\nProven experience with Firewall Rule Governance & Lifecycle Management.\nStrong understanding of Ingress/Egress Traffic Enforcementand Network Segmentationprinciples.\nHands-on experience with Palo Alto Networks NGFWand Fortinet FortiGateplatforms.\nExperience configuring and supporting Phoenix Contact mGuardfirewalls within OT environments.\nKnowledge of AWS security services, including:Security Groups\nNetwork ACLs (NACLs)\nWeb Application Firewall (WAF)\nApplication Load Balancers (ALB)\nNetwork Load Balancers (NLB)\n\nExperience with NAT design and policy enforcement.\nUnderstanding of OT/ICS Network Securityconcepts and best practices.\nAbility to perform risk assessmentsand contribute to secure network architecture designs.\nExperience supporting Security Operations, incident response activities, and exposure reduction initiatives.\nStrong troubleshooting and stakeholder management skills, with the ability to work effectively across infrastructure, cloud, application, and OT teams.\nWhat\"s next:\nIt\"s best to apply today, because job postings can be taken down and we wouldn\"t want you to miss this opportunity. In case you need further information, just send us a message at  and we\"ll be happy to assist!\nThe preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.\nDiversity & Inclusion\nHere at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!\nAbout us\nWe are a Brazilian company with over 35 years of experience in delivering IT services worldwide, ranging from IT outsourcing to application development or IT staffing. We have a direct presence in 41 countries, through our 70 offices located throughout the world. We have managed to become the preferred partner of many small-to-midsize local and regional companies as well. Most of our clients come from industries such as financial services, manufacturing, telecommunications, chemical, services, technology, public sector and utilities.\nStefanini has career opportunities locally and around the world for professionals interested in a vibrant, passionate, team-oriented workplace. If you are a customer-centric person with a \"get it done\" attitude, come over for coffee and a talk on your future career with us! Learn more about us on www.stefanini.com and join us on LinkedIn, Facebook and Instagram where we regularly post insights from our colleagues.\nWe want to inform you that there are currently scams targeting job seekers by falsely using our company\"s name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.\nPlease remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.\nIf you suspect you\"ve been targeted, please contact us immediately at  for verification.\nKey Points to Remember:\n* Legitimate job offers only follow interviews conducted with our hiring managers or clients.\n* We will never ask for payment at any stage of the recruitment process.\nStay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.\nWhat We're Looking For:\nProven experience with Firewall Rule Governance & Lifecycle Management.\nStrong understanding of Ingress/Egress Traffic Enforcementand Network Segmentationprinciples.\nHands-on experience with Palo Alto Networks NGFWand Fortinet FortiGateplatforms.\nExperience configuring and supporting Phoenix Contact mGuardfirewalls within OT environments.\nKnowledge of AWS security services, including:Security Groups\nNetwork ACLs (NACLs)\nWeb Application Firewall (WAF)\nApplication Load Balancers (ALB)\nNetwork Load Balancers (NLB)\n\nExperience with NAT design and policy enforcement.\nUnderstanding of OT/ICS Network Securityconcepts and best practices.\nAbility to perform risk assessmentsand contribute to secure network architecture designs.\nExperience supporting Security Operations, incident response activities, and exposure reduction initiatives.\nStrong troubleshooting and stakeholder management skills, with the ability to work effectively across infrastructure, cloud, application, and OT teams.\nWhat\"s next:\nIt\"s best to apply today, because job postings can be taken down and we wouldn\"t want you to miss this opportunity. In case you need further information, just send us a message at  and we\"ll be happy to assist!\nThe preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.\nDiversity & Inclusion\nHere at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!\nAbout us\nWe are a Brazilian company with over 35 years of experience in delivering IT services worldwide, ranging from IT outsourcing to application development or IT staffing. We have a direct presence in 41 countries, through our 70 offices located throughout the world. We have managed to become the preferred partner of many small-to-midsize local and regional companies as well. Most of our clients come from industries such as financial services, manufacturing, telecommunications, chemical, services, technology, public sector and utilities.\nStefanini has career opportunities locally and around the world for professionals interested in a vibrant, passionate, team-oriented workplace. If you are a customer-centric person with a \"get it done\" attitude, come over for coffee and a talk on your future career with us! Learn more about us on www.stefanini.com and join us on LinkedIn, Facebook and Instagram where we regularly post insights from our colleagues.\nWe want to inform you that there are currently scams targeting job seekers by falsely using our company\"s name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.\nPlease remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.\nIf you suspect you\"ve been targeted, please contact us immediately at  for verification.\nKey Points to Remember:\n* Legitimate job offers only follow interviews conducted with our hiring managers or clients.\n* We will never ask for payment at any stage of the recruitment process.\nStay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.","description_format":"text","description_chars":9608,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","IT Help Desk & Service Desk","Managed Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-28T19:26:21Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/stefanini-emea-network-security-engineer","json_url":"https://alion.io/job/stefanini-emea-network-security-engineer.json","meta":{"generated_at":"2026-10-29T19:23:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28816,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4425653},"rest":"https://alion.io/mcp/rest/get_company?id=4425653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstefanini-emea-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstefanini-emea-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstefanini-emea-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stefanini-emea-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstefanini-emea-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3416030}},{"tool":"search_jobs","arguments":{"company":"stefanini.ro","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3416030},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}