{"id":2140755,"url":"https://alion.io/job/ttms-platform-security-senior-rntsk0041235-network-security-engineer","title":"Platform Security-Senior RNTSK0041235 / Network Security Engineer","company":{"id":1826585,"name":"TTMS","domain":"ttms.com","url":"https://alion.io/company/ttms-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Traffit","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":103000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Akamai","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"Cloudflare","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"OSPF","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"GitHub","optional":true},{"name":"ISO 27001","optional":true},{"name":"Matter","optional":true}],"status":"live","first_seen_at":"2026-07-21T13:46:36Z","employer_posted_date":"2026-07-21","last_verified_at":"2026-10-19T12:07:15Z","board_verified":true,"closed_at":null,"days_open":89,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":89},"description":"As a Senior Cybersecurity Engineer (Edge Defense), you will play a pivotal role in the end-to-end lifecycle of our perimeter and cloud security products. Your primary focus will be the global engineering, adoption, and optimization of our Edge security stack, including Next-Generation Firewalls (NGFW), DDoS mitigation, and Zero Trust Network Access (ZTNA). You are a technical \"implementer\" responsible for designing robust, high-availability architectures that protect our global network from external threats while enabling secure, seamless access to multi-cloud environments. By leveraging an \"Automation-First\" mindset, you will transform traditional perimeter controls into scalable, code-driven security services, ensuring digital boundaries remain resilient in an evolving threat landscape.\nResponsibilities\nEducation / Experience\nEducational Background: Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related technical field.\nPerimeter Security Mastery: 5+ years of hands-on experience in designing and managing enterprise-grade Firewall environments (specifically Palo Alto and/or Fortinet).\nCloud Security Expertise: Proven track record of implementing network security controls in at least two major cloud providers (AWS, Azure, or GCP).\nPerimeter & Inspection Expertise: Proven track record in configuring and maintaining Palo Alto Next-Generation Firewalls (NGFW), including TLS inspection, User identification, WildFire, Threat Prevention, URL Filtering and GlobalProtect.\nAutomation Engineering: Proven experience using Ansible, Terraform, or Python to manage network security infrastructure at scale.\nLarge-Scale Infrastructure: Experience managing security controls in complex, global environments involving thousands of diverse device profiles (IoT, Medical, Corporate).\nRegulated Industry: Experience working in highly regulated environments (e.g., Pharmaceuticals, Healthcare, or Finance) is a significant plus.\nTechnical Skills\nNGFW Expert: Expert-level knowledge of Palo Alto and/or Fortinet platforms, including advanced threat prevention, SSL decryption, and high-availability design.\nDDoS Mitigation: Experience managing specialized DDoS protection services (e.g., Akamai, Cloudflare, or F5).\nZTNA & Remote Access: Proficiency in modern Zero Trust architectures and SASE frameworks (e.g., Zscaler, Prisma Access).\nMulti-Cloud Networking: Strong understanding of cloud networking components (VPCs, VNETs, Transit Gateways, Cloud Firewalls).\nNetwork Foundations: Deep understanding of core protocols (BGP, OSPF, DNS, TLS/SSL) and how they intersect with security enforcement.\nSkills below will be considered a plus:\nVendor certifications: Fortinet NSE or Palo Alto Networks PCNSA PCNSE or Cisco CCNP Security\nCybersecurity certification: CISSP\nInfrastructure as Code (IaC): Proficiency in Terraform and GitHub to maintain version-controlled, reproducible security configurations.\nScripting & Integration: Strong skills in Python or Go to build custom API integrations between security platforms and internal orchestration tools.\nDDoS Mitigation: Experience managing specialized DDoS protection services (e.g., Akamai, Cloudflare, or F5).\nGovernance Frameworks: Familiarity with NIST, ISO 27001, and FAIR data principles.\nLeadership Skills\nCommunication: Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non-technical stakeholders.\nInnovation & Curiosity: A relentless passion for staying ahead of threat actors by researching emerging network security trends and automated enforcement techniques.\nThriving in Ambiguity: Ability to navigate global complexity and drive clarity when translating high-level security requirements into functional network policies.\nSelf-Starter: Proven ability to manage technical workstreams from concept to production with minimal supervision, taking full ownership of the Edge Defense product lifecycle.\nAdditional Qualifications\nDemonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniques\nStrong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networks\nDemonstrated interpersonal, collaborative and commitment to operational excellence skills.\nRequirements\nEdge Architecture & Engineering\nPerimeter Defense Mastery: Lead the end-to-end deployment, configuration, and maintenance of Next-Generation Firewalls (Palo Alto, Fortinet), ensuring high availability (Active/Active & Active/Passive) and optimal inspection performance across global entry points.Zero Trust Transition: Architect and implement ZTNA solutions to move beyond legacy VPNs, focusing on granular, application-level access and identity-aware security policies.\n\nMulti-Cloud Network Security: Engineer and manage cloud-native security controls within AWS, Azure, and GCP, ensuring consistent security posture across hybrid and multi-cloud environments.\nDDoS & Threat Mitigation: Design and refine DDoS protection strategies and automated threat prevention policies (SSL decryption, IPS/IDS) to shield critical infrastructure from sophisticated external attacks.\nProduct Lifecycle & Evolution\nLifecycle Governance: Oversee the delivery of Edge solutions from initial design through build, global rollout, and continuous optimization, ensuring that all security controls are reliable, scalable, and documented.\nEdge Innovation: Proactively identify emerging trends in Edge computing and SASE (Secure Access Service Edge) to inform the product roadmap and maintain a competitive advantage in network defense.\nOperational Excellence & Visibility\nTechnical Subject Matter Expertise: Serve as the lead engineer for complex network security escalations, performing deep-packet analysis and root-cause investigations to implement long-term architectural fixes.\nSecurity Observability: Develop advanced monitoring dashboards and telemetry to provide real-time visibility into edge traffic patterns, attack surfaces, and the health of the security stack.\nAutomation & Orchestration: Manage security policies as code while continuously improving automation workflows and cross-platform orchestration to eliminate manual friction, reduce operational overhead, and ensure consistent, high-speed security enforcement.\nSelf-Service & Enablement: Build and maintain automate\nBenefits\nParticipation in interesting and demanding projects.\nFlexible working hours.\nA great, non-corporate atmosphere.\nPossibility to work remote or hybrid (2 days per week from the office).\nOpportunities for development and promotion.\nAttractive package of benefits.","description_format":"text","description_chars":6728,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","IT Consulting & Digital Transformation","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-10-09T03:05:19Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.478,"p_room":0.28,"age_days":89,"expected_fill_days":26,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/ttms-platform-security-senior-rntsk0041235-network-security-engineer","json_url":"https://alion.io/job/ttms-platform-security-senior-rntsk0041235-network-security-engineer.json","meta":{"generated_at":"2026-10-19T13:24:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9641,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1826585},"rest":"https://alion.io/mcp/rest/get_company?id=1826585"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fttms-platform-security-senior-rntsk0041235-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fttms-platform-security-senior-rntsk0041235-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fttms-platform-security-senior-rntsk0041235-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ttms-platform-security-senior-rntsk0041235-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fttms-platform-security-senior-rntsk0041235-network-security-engineer"}]}