- Company Name
- Insight
- Job Title
- Network Security Engineer
- Job Description
-
**Job Title**
Network Security Engineer
**Role Summary**
Contract engineer responsible for designing, implementing, and maintaining secure network architectures and controls. Focuses on firewalls, segmentation, Zero Trust principles, network monitoring, OS hardening, backup/recovery validation, and application/database security across hybrid environments.
**Expactations**
- Immediate start on a contract basis, working remotely/office hybrid.
- Deep knowledge of secure network design and zero‑trust deployment.
- Ability to test and validate backup, recovery, and disaster‑recovery objectives.
- Communicate effectively with infrastructure and application teams.
**Key Responsibilities**
- Design, deploy, and maintain VLANs, VPNs, TCP/IP, DMZs, NAC, routers, gateways.
- Configure firewalls, perform rule assessments; manage segmentation and zoning per zero‑trust model.
- Operate IDS/IPS and network monitoring tools to detect and respond to threats.
- Execute OS‑level hardening on servers; secure virtualisation and hypervisor platforms.
- Oversee, test, and document backup and recovery processes (full, incremental, differential) to meet RPO/RTO goals.
- Implement application and database security controls.
- Develop threat models and architectural designs to identify and mitigate risks.
**Required Skills**
- Network security architecture and design.
- Firewall management (stateful inspection, rule sets).
- VLAN, VPN, DMZ, NAC, routing, and gateway configuration.
- Zero Trust strategy, segmentation, zoning.
- IDS/IPS deployment and incident response.
- OS hardening (Windows/Linux) and hypervisor security.
- Backup/recovery strategy (RPO/RTO) validation.
- Application & database security controls.
- Threat modeling and risk assessment.
- Excellent written and verbal communication.
- Ability to work independently in a hybrid environment.
- German language proficiency is an advantage (not required).
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent professional experience.
- Relevant security certifications preferred: CISSP, CISM, CompTIA Security+, CCNA Security, or equivalent.
(Word count: 234)