Network Security Operations Engineer

About the role

Encora is looking for a hands-on Network Security Engineer to operate and continuously improve its network security stack, mainly enterprise firewalls (Palo Alto, Fortinet, Cisco), secure web gateways/proxies and site-to-site and remote-access VPNs. The ideal candidate is an operator-engineer hybrid with deep knowledge of L2-L7 security controls, strong troubleshooting skills and experience in high-availability, low-latency environments. Experience supporting MAS TRM or BNM RMiT audits is highly preferred.

Key responsibilities

• Operate and maintain Palo Alto, Fortinet and Cisco firewalls, proxies and VPN appliances (IPSec/SSL)
• Monitor and maintain HA clusters, BGP/OSPF routing and NAT/policy objects to meet availability and performance SLAs
• Execute change management: rule changes, NAT adjustments, SSL decryption policies, URL categories and app-ID signatures
• Troubleshoot incidents with packet-level analysis (pcaps, flow records, session tables, global counters)
• Manage segmentation (zones, VRFs, tags), east-west and north-south controls and zero-trust baselines
• Maintain security templates (objects, groups, security profiles, threat/vulnerability profiles, URL filtering, DLP where applicable)
• Tune IPS/IDS, anti-malware, WildFire/ATP, DNS Security and sandboxing to reduce false positives
• Integrate firewalls with AD/LDAP, IdP, SSO, SIEM/SOAR, PKI and EDR/XDR telemetry
• Maintain VPN architectures (IPSec, GlobalProtect/AnyConnect/FortiClient), posture checks, MFA and split/full tunnel policies
• Support SD-WAN edge security, proxy/SWG policies and CASB integration
• Maintain policy standards, rule certification cycles and least-privilege reviews against ISO 27001, NIST 800-53/CSF, SOC 2, PCI DSS and MAS TRM
• Document disaster recovery and BCP plans, act as escalation point for incidents, run RCA and build dashboards and metrics
• Contribute to runbooks, knowledge base articles and automation (Ansible, Terraform, Panorama, FortiManager, Cisco FMC APIs)