Spezialist IT Network Engineering & Security (m/f/d)

You take responsibility for operation, administration and strategic further development of firewall and security infrastructure in georedundant data centers, develop and implement modern network security concepts, design firewall rules, segmentation strategies and security zones and play a key role in rebuilding the security architecture – from classic perimeter firewalls to modern zero-trust network access (ZTNA) You monitor security events, analyse threats, respond to security incidents in close cooperation with internal and external experts, and continuously develop measures to improve security posters. You create, maintain and optimize firewall rules, conduct regular security reviews, ensure compliance requirements such as BSI IT basic protection and KRITIS, and document security concepts professionally for audits and different stakeholders. You automate security processes, use firewall tracking tools, develop scripts for recurring tasks and advance the standardization of security configurations to minimize manual error sources and significantly reduce response times. You analyze security requirements from projects, coordinate the implementation of security measures in cooperation with network teams, system administrators, manufacturers and service providers, support second-level support in complex security issues and participate in a changing, additionally remunerated readiness.

You have completed an IT training or studies in the field of computer science, information technology or IT security and have practical experience in network security or firewall administration, either in classic IT security roles or as a network administrator with security focus. You have profound knowledge in the administration of enterprise firewalls, understand concepts such as NAT, VPN, Application Control, IPS/IDS and URL filtering and have already gained experience with security solutions such as Checkpoint, Fortigate, Palo Alto Networks or comparable systems; you also appreciate central solutions such as Tufin. You are familiar with network segmentation, DMZ architectures, microsegmentation and modern approaches such as Zero Trust Network Access (ZTNA) and bring interest in topics such as Next Generation Firewalls (NGFW), Secure Access Service Edge (SASE) or Network Detection and Response (NDR). You ideally have experience with security frameworks such as BSI IT basic protection, ISO 27001 or KRITIS requirements and understand the importance of documentation, change management and security governance in regulated environments or bring the willingness to acquire this knowledge. You work methodically and solution-oriented, evaluate risks pragmatically, develop sustainable solutions instead of quick fixes, keep track of complex rules and heterogeneous network landscapes and convince as a team player by clear communication with different stakeholders, flexibility, openness for new structures, and a pronounced hands-on mentality and continuous readiness to learn. .