Junior Network Security Engineer

A key objective of the position is to support the team in reducing the operational ticket backlog while maintaining service quality, security, and accurate documentation. The role performs initial analysis and troubleshooting, resolves standard and recurring requests based on documented procedures, and escalates complex issues to experienced engineers, the Network Security Architect, vendors, or service providers when required.

The position also supports platform monitoring, maintenance, lifecycle activities, audits, control reviews, documentation, and continuous service improvement. The Junior Network Security Engineer works under the guidance of experienced team members and gradually develops broader technical knowledge and operational responsibility across the Network Security & Trust service portfolio.

We offer:

1. Incident, Service Request and Change Processing - 35%

• Process Network Security & Trust incidents, service requests, tasks, and standard changes using the designated IT service-management tool.

• Perform initial analysis, troubleshooting, classification, prioritization, and documentation of incoming tickets.

• Resolve standard and recurring issues by following approved procedures, knowledge articles, technical standards, and operational runbooks.

• Support the team in reducing the ticket backlog through structured processing, regular follow-up, and accurate status updates.

• Monitor assigned tickets and ensure timely processing in line with agreed priorities and service levels.

• Collect relevant technical information, logs, configurations, and error details before escalating complex cases.

• Escalate security-critical, high-impact, or technically complex issues to senior engineers, architects, vendors, or service providers.

• Support the planning, testing, documentation, and implementation of standard and low-risk changes.

• Participate in incident reviews, problem investigations, and root cause analysis under the guidance of experienced team members.

• Create and maintain knowledge articles, troubleshooting instructions, and operational runbooks for recurring issues.

2. Firewall Operations and Security Policy Support - 25%

• Support the daily operation, monitoring, maintenance, and health checking of enterprise firewall services across on-premises, cloud, edge, and industrial environments.

• Implement approved firewall-rule, object, NAT, and security-policy changes by following established procedures and technical standards.

• Validate requests for completeness, approvals, ownership, source and destination information, ports, protocols, and business justification.

• Support the review, modification, deactivation, and removal of firewall rules and objects.

• Assist with firewall rule reviews, recertification, cleanup, and policy-optimization activities.

• Perform initial troubleshooting of firewall, NAT, security-policy, and communication-flow issues.

• Monitor firewall availability, capacity, performance, and operational alerts and escalate deviations where required.

• Support firewall platform maintenance, upgrades, backup and restore activities, and operational readiness checks.

• Maintain accurate firewall configuration records, operating procedures, diagrams, and technical documentation.

3. VPN, Partner Connectivity and Segmentation Operations - 15%

• Support the implementation, maintenance, monitoring, and troubleshooting of site-to-site IPsec VPN connections.

• Process standard requests related to business partner, service provider, cloud, and third-party connectivity.

• Assist with the implementation and maintenance of approved network-segmentation controls, security zones, and controlled communication paths.

• Support NAC and microsegmentation activities from a network-security and policy-enforcement perspective.

• Perform initial troubleshooting of VPN availability, tunnel status, encryption parameters, network-security policies, and connectivity dependencies.

• Maintain accurate configuration, ownership, approval, and lifecycle information for VPN and partner-connectivity services.

• Support periodic reviews, recertification, deactivation, and removal of obsolete VPN connections and communication paths.

• Coordinate operational tasks with internal infrastructure teams, external partners, vendors, and managed service providers.

4. PKI and Certificate Operations - 10%

• Process standard certificate requests and support the issuance, deployment, renewal, replacement, revocation, and retirement of digital certificates.

• Support operational activities related to Public Key Infrastructure and Certificate Lifecycle Management.

• Monitor certificate validity, upcoming expirations, service alerts, and certificate-related operational events.

• Assist application owners, infrastructure teams, network teams, and service providers with standard certificate requests and lifecycle activities.

• Perform initial troubleshooting of certificate enrollment, expiration, trust-chain, revocation, validation, and TLS-related issues.

• Maintain accurate certificate inventory, ownership, lifecycle, configuration, and operational information in the designated systems of record.

• Support the onboarding of applications, infrastructure platforms, network devices, users, and machine identities to approved certificate services.

• Support PKI and CLM platform maintenance, control reviews, audits, backup and restore activities, and operational documentation.

• Escalate complex issues related to PKI, Certificate Authorities, cryptography, trust models, or certificate integration to the responsible specialists.

5. Service Reliability, Lifecycle and Compliance Support - 10%

• Perform recurring operational checks and maintenance activities for Network Security & Trust services.

• Support platform lifecycle activities, including software updates, upgrades, configuration reviews, backup verification, and operational readiness checks.

• Assist with monitoring service health, availability, capacity, certificate expiration, policy compliance, and operational risks.

• Support technical audits, control assessments, evidence preparation, recertification activities, and remediation of operational findings.

• Maintain the operational and technical documentation required for the assigned services and activities.

• Perform assigned activities in accordance with approved security standards, change procedures, separation-of-duties requirements, and operational controls.

• Contribute to service reporting by providing accurate ticket, incident, change, lifecycle, and operational information.

• Identify recurring issues, missing documentation, and operational risks and communicate them to the responsible senior team members.

6. Continuous Improvement and Automation Support - 5%

• Contribute to the standardization and simplification of recurring operational activities.

• Identify repetitive tasks that may be suitable for templates, scripts, workflows, APIs, or other forms of automation.

• Support the testing and use of approved automation for configuration validation, reporting, certificate lifecycle processing, and operational checks.

• Assist senior engineers and architects with technical testing, implementation activities, and operational handover.

• Contribute to the improvement of knowledge articles, troubleshooting procedures, request forms, and operational runbooks.

• Participate in team knowledge-sharing, technical training, service reviews, and continuous-improvement activities.

Interfaces:

Internal:

• Network Security & Trust team and Network Security Architect

• Related infrastructure, network, cloud, workplace, application, and Cyber Security teams

• IT service-management and support functions

• Regional IT teams, system and application owners, and project teams

• Architecture, risk, compliance, and audit functions

External:

• Managed Network Security & Trust service providers

• Firewall, VPN, NAC, PKI, CLM, and security-technology vendors

• Certificate service providers and external trust-service partners

• Security integrators and implementation partners

• Cloud service providers and external business partners

• External consultants and auditors where required

Tasks and Qualifications:

Experience:

• Initial professional experience, internship experience, working-student experience, or practical training in IT infrastructure, network operations, network security, cyber security, PKI, certificate management, or a comparable technical environment

• Basic practical experience with firewalls, VPNs, network-security controls, certificates, or IT operations is an advantage

• Experience processing technical tickets or working with an IT service-management tool is an advantage

• Initial experience with incident handling, technical troubleshooting, documentation, or standard changes is an advantage

• Exposure to enterprise firewall, VPN, PKI, certificate management, CLM, or comparable infrastructure-security technologies is an advantage

• Experience in an international or distributed IT environment is an advantage but not mandatory

• Strong willingness to learn Network Security & Trust technologies and gradually assume broader operational responsibility

Qualifications/Specialization:

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cyber Security, Telecommunications, Electronics, or a comparable technical discipline

• A comparable technical vocational qualification combined with relevant practical experience may also be considered

• Entry-level certifications or training such as Fortinet Certified Fundamentals, Fortinet Certified Associate, Cisco CCNA, CompTIA Network+, CompTIA Security+, Microsoft security fundamentals, ITIL Foundation, or comparable qualifications are an advantage

• Initial PKI, certificate-management, cryptography, or CLM product training is an advantage but not mandatory

Soft Skills:

• Strong service orientation and willingness to support the team in reducing the operational ticket backlog

• Reliable, structured, and accurate working style

• Strong willingness to learn and develop technical knowledge

• Ownership of assigned tickets and operational tasks

• Ability to follow procedures while identifying unclear or missing information

• Good analytical thinking and basic troubleshooting skills

• Ability to recognize when escalation or additional support is required

• Good collaboration skills and willingness to work with global teams and external providers

• Clear and professional written and verbal communication

• Strong documentation and knowledge-sharing mindset

• Good written and spoken English