{"id":3714975,"url":"https://alion.io/job/tiger-brands-senior-firewall-network-security-engineer","title":"Senior Firewall & Network Security Engineer","company":{"id":3213120,"name":"Tiger Brands","domain":"tigerbrands.com","url":"https://alion.io/company/tigerbrands","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FortiGate","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-10-30T08:21:52Z","employer_posted_date":null,"last_verified_at":"2026-10-30T08:21:52Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"The Senior Firewall & Network Security Engineer (NGFW) is a senior, hands on technical specialist responsible for the end to end operational management of the organisation’s Next Generation Firewall (NGFW) security services, with primary experience in Fortinet FortiGate and similar enterprise firewall platforms. The role ensures effective delivery of layer 7 firewalling, intrusion prevention, VPN, application control, web filtering (including directory integrated policies), anti malware protections, and internal segmentation controls, safeguarding business operations while enabling secure connectivity. \n\n This role is accountable for secure policy enforcement, continuous optimization and recertification of firewall rules, incident response, security hygiene (patching/backups), and compliance reporting, operating in alignment with security standards and governance processes.\n\nWHAT YOU WILL DO:\n\n Own and operate NGFW services including next‑generation layer‑7 firewalling, ensuring secure and resilient perimeter protection. \n\n Configure, manage, and tune network intrusion detection/prevention (IPS/IDS) controls, including rules configuration aligned to business requirements and security recommendations. \n\n Manage VPN services (remote access and site‑to‑site), supporting secure connectivity and troubleshooting across the firewall estate\n\n Implement and maintain application control (application‑aware policy enforcement) to reduce risk and improve security posture. \n\n Implement and maintain web filtering with directory integration, enforcing organisational internet access policies and updating content filtering as OEM updates are released. \n\n Operate and maintain anti‑virus / malware protection services on the NGFW platform to protect against malicious websites, exploits, and malware. \n\n Perform regular modelling, testing, execution, and tracking of firewall rule/policy changes based on business requirements, ensuring governance alignment \n\n Conduct monitoring and audit of firewall configurations against agreed standards and approved changes, ensuring configuration integrity and compliance. \n\n Drive optimisation and periodic recertification of rules and policies, ensuring they remain effective, minimal, and aligned to good practice principles. \n\n Implement and manage internal network segmentation controls to support secure zoning and reduce lateral movement risk. \n\n Handle and resolve incidents, alerts, exceptions, and exposures associated with firewall and perimeter security controls, including root cause analysis and remediation guidance. \n\n Ensure NGFW platform hygiene, including patching in line with OEM recommendations and maintaining secure operational posture. \n\n Perform configuration backups and store them according to best practice, supporting recoverability and operational continuity. \n\n Provide actionable operational security communications by notifying stakeholders of major security/health issues with context and remediation recommendations. \n\n Maintain and support centralised logging and reporting integrations for analysis and operational visibility (e.g., external logging to an analyser platform) where implemented. \n\n Produce security and compliance reporting on incidents raised and compliance status, aligned to reporting requirements and frequency. \n\n Assist with defining and maintaining vulnerability scan policy and related firewall security inputs \n\nWHAT YOU WILL BRING TO THE TABLE:\n\nKey attributes and competencies\n\n Strong hands on expertise operating NGFW security controls (Layer 7 firewalling, IPS/IDS, VPN, application control, web filtering, malware protections). \n\n Strong policy governance capability: change modelling/testing, configuration audit, and periodic policy optimisation/recertification. \n\n Incident leadership: ability to handle and resolve alerts, exceptions, and exposures with structured RCA and pragmatic remediation. \n\n Ability to balance security and availability, ensuring secure enablement of business connectivity while maintaining controls.\n\nExperience and Qualifications\n\n 5–10 years’ experience in enterprise firewall / network security operations \n\n Proven hands on experience with Fortinet FortiGate NGFW operations (policy, IPS, VPN, web filtering, application control, AV/UTM services\n\n Experience with similar enterprise firewall technologies (advantageous) and operating in change controlled environments.\n\nQualifications & Certifications\n\n Relevant IT qualification (Diploma/Degree preferred).\n\n Fortinet NSE / Fortinet Professional certifications (strongly preferred), e.g.: \n\n NSE 4 / FCP Network Security (core operations), NSE 5 (analysis/management)\n\n NSE 7 (advanced troubleshooting/enterprise design & operations)\n\nDeadline:2nd November,2026","description_format":"text","description_chars":4762,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Consumer Goods","Financial Services","Food & Beverages"],"lifecycle":[{"event":"open","at":"2026-11-04T00:22:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":35,"reasons":["seen:4","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/tiger-brands-senior-firewall-network-security-engineer","json_url":"https://alion.io/job/tiger-brands-senior-firewall-network-security-engineer.json","meta":{"generated_at":"2026-11-04T19:45:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30429,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3213120},"rest":"https://alion.io/mcp/rest/get_company?id=3213120"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftiger-brands-senior-firewall-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftiger-brands-senior-firewall-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftiger-brands-senior-firewall-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tiger-brands-senior-firewall-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftiger-brands-senior-firewall-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3714975}},{"tool":"search_jobs","arguments":{"company":"tigerbrands.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3714975},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}