Senior Network Security Engineer

We are seeking a Senior Network & Security Engineer with strong expertise in secure network infrastructures, capable of designing, implementing, and managing advanced firewalling, switching, wireless, and SASE architectures.

This role is critical in ensuring the reliability, performance, and security of enterprise networks across on-premises, cloud, and hybrid environments.

**Key Responsibilities**

- Design, deploy, and manage enterprise firewalls and NGFWs, including security policies, NAT, VPNs, and advanced traffic inspection.
- Implement and maintain high-availability L2/L3 switching infrastructures.
- Design, operate, and troubleshoot enterprise Wi-Fi networks, including RF planning and security.
- Deploy and manage SASE / SSE solutions (Secure Web Gateway, ZTNA, FWaaS).
- Design scalable, segmented, and resilient network architectures.
- Integrate network security controls with cloud and hybrid environments.
- Perform advanced network and security troubleshooting.
- Collaborate with SOC, Cloud, and IT Operations teams.
- Produce technical documentation and operational best practices.
- Provide technical leadership and mentoring to junior engineers.

**Required Technical Skills**

**Firewall & Network Security**

Hands-on experience with one or more of the following vendors:

- Palo Alto Networks (PAN-OS, Panorama)
- Fortinet (FortiGate, FortiManager, FortiAnalyzer)
- Check Point
- Cisco Secure Firewall (Firepower / ASA)
- Juniper SRX

Core competencies:

- Security policies, Application Control, IPS/IDS
- IPsec and SSL VPNs (site-to-site and remote access)
- Network segmentation and Zero Trust principles

**Switching & Routing**

Experience with:

- Cisco (Catalyst, Nexus)
- HPE Aruba
- Juniper (EX, QFX)

Technical skills:

- VLANs, STP, LACP
- Dynamic routing protocols (OSPF, BGP)
- High Availability and redundancy design

**Enterprise Wi-Fi**

Experience with:

- Cisco Wireless / Meraki
- Aruba Networks
- Extreme Networks

**Skills:**

- RF design and planning
- Wi-Fi security (802.1X, WPA2/WPA3, NAC)
- Performance and coverage troubleshooting

**SASE / Cloud Security**

Experience or working knowledge of:

- Palo Alto Prisma Access
- Fortinet SASE
- Cisco Secure Access / Umbrella
- ZscaleR

Competencies:

- Secure Web Gateway (SWG)
- ZTNA
- FWaaS
- Integration with Identity Providers (Azure AD / Entra ID)

**Requirements**

- 5+ years of experience in Network & Security Engineering.
- Strong knowledge of network protocols (TCP/IP, DNS, DHCP).
- Experience in enterprise or service provider environments.
- Ability to work independently on mission-critical infrastructures.

**Preferred Qualifications**

- Vendor certifications:
- PCNSE / PCNSA
- Fortinet NSE
- CCNP Enterprise / Security
- Aruba ACNP
- Experience in network transformation or SASE migration projects.
- Familiarity with automation tools (Ansible, Python).

**Soft Skills**

- Strong analytical mindset and security-driven approach.
- Excellent problem-solving abilities.
- Effective communication with both technical and non-technical stakeholders.
- Proactive attitude and commitment to continuous improvement.

**Please note:**
*Proficiency in Italian is a mandatory requirement for this position.*

**How to Apply:**

Interested candidates should send their CV to e-mail address: hr@servicefactory.al

*\* Please note that only selected candidates will be contacted for interviews.*