75% remote: Network Security Engineer

Job description:

Here is the updated text:

Network Security Engineer (f/m/d)

Start: May 19, 2025
Duration: 30.09.2025 (long-term engagement through 2026)
Capacity: 100% if possible
Location: 75% Remote, 25% Berlin (1 week Berlin / 3 weeks remote in rotation), up to 50% onsite in peak times

Role:

The Network Security Engineer coordinates with the Security Delivery, responsible for planning and delivering infrastructure in line with architectural and operational requirements.

Requirements:

At least 10 years of security experience in enterprise and data center network environments in large-scale data center contexts.
PCSNE, CCIE, or CCNP Security & Datacenter certification required.
Clear communication with peers and engineers about the environment's status.
Problem analysis and resolution competencies covering dependencies to layers above and below the network topics.

Skills:

Good experience with:
Datacenter security, VLAN, VPN, and remote access.
Firewalls for ACLs, VPNs, and IPS/IDS.
Secrets Management, especially with HashiCorp Vault.
IAM/IDP tool Keycloak and needed protocols (SAML, OIDC, OAuth2, LDAP).
Compliance skills for ISO 27001, NIST, GDPR, SOC2.
Security delivery automation with Ansible, ability to align with software development team using Python.
Experience with Jira, Confluence, and Miro or similar tools.
Fluent English in speech and writing (at least C1).

Should-have skills:

Basic experience with Cisco ACI and/or Juniper Apstra.
Linux (minimum basic).
SIEM Operations, Threat Hunting.
API/Microservices Security best practices.