Network Security Engineer

Location: Geneva · Contract: Permanent · Assignment: long term · Rate: 100% · Start: January 2027

For one of our clients based in Geneva, we are looking for an experienced Network Security Engineer.

Context

The Networks team ensures connectivity across the entire estate (workstations, telephony, servers and connected devices) as well as communications with external partners and the Internet. It also guarantees the internal and perimeter security of the network.

The reliability and performance of the network are critical for all IT services, including in the face of unpredictable incidents.

The scope covers five closely related areas:

• A shared metropolitan network (MPLS)

• Networks of several hundred sites and multiple datacentres

• Network services (NTP, DNS, DHCP, etc.)

• Interconnections with partner networks and internal connectivity

• Network security elements (firewalls, IPS, reverse proxies, web proxies, VPN, PAM, etc.)

Your missions

• Design, deploy and maintain network security solutions (firewalls, VPN, IPS, reverse proxies, web proxies, PAM, network segmentation, etc.)

• Participate in defining and implementing network security policies

• Analyse security events and contribute to incident response

• Identify vulnerabilities and propose corrective measures

• Participate in architecture, transformation and infrastructure migration projects

• Automate administration and security tasks where appropriate

• Keep up to date with threats, vulnerabilities and new cybersecurity solutions

• Document architectures, procedures and configurations

Education

• University Master’s degree in computer science, EPF engineering diploma or equivalent

• CISSP, Cisco, Check Point, Palo Alto, F5 and Fortinet certifications highly appreciated

Essential skills

• 8 years or more experience in networking and cybersecurity, ideally in complex, critical or highly regulated environments

• Excellent command of TCP/IP, UDP, DNS, DHCP, ARP, ICMP, HTTP/HTTPS protocols

• Expertise in at least one Next Generation Firewall (NGFW) solution: Palo Alto Networks, Fortinet or Check Point

• Expertise in designing, administering and troubleshooting network security solutions: filtering policies, NAT/PAT, segmentation, security zones and flow control

• Excellent ability to analyse network traffic and resolve complex incidents (Wireshark, tcpdump, network diagnostic tools)

• Experience in analysing, qualifying and resolving network security incidents, including in critical environments

• Ability to produce and maintain architecture documentation, network diagrams, operational procedures and technical files

Appreciated skills

• Administration of solutions such as F5 Reverse Proxy, Cisco ISE and Infoblox DDI

• Automation of network and security operations (Python, Ansible, REST API)

• Mastery of routing protocols

A plus

• Knowledge of Cisco ACI, VMware NSX and VXLAN/EVPN technologies

• Knowledge of a workflow automation tool, such as n8n

Personal qualities

• Analytical mind and ability to investigate methodically

• Team spirit and willingness to share knowledge

• Good writing skills, ease in both spoken and written communication

• High autonomy, rigour and pragmatism

• Ability to work under pressure during incident situations