Security & Network Engineer

Sword is looking for an experienced Security & Network Engineer for a long-term consultancy assignment with one of our major clients in the financial sector.

Your Role

In this position, you will play a key role in the day-to-day management of the firewall, network, and proxy infrastructure of the client. You will work closely with a multidisciplinary technical team and will be responsible for:

• Configuration & management: implementing configuration changes, applying patches and upgrades, reviewing existing settings, and proposing improvements.

• Incident & problem solving: analyzing and resolving issues with network/security equipment and malfunctioning application flows.

• Network architecture: contributing to the design and evolution of a secure network architecture, including network segmentation and the setup of secure internet services.

• Communication & reporting: representing the network department in internal and external technical meetings, reporting to management, and documenting procedures and changes.

• Technical documentation: preparing manuals, procedures, and project documentation.

Profile

• Education: Bachelor’s degree (or equivalent through experience) in IT, networks, or cybersecurity.

• Experience: at least 5 years of experience as a network engineer in large and complex IT environments.

• Languages: excellent command of technical English and either French or Dutch, both spoken and written.

Skills

• Ability to translate security policies into concrete architecture components and procedures.

• Experience with network segmentation projects and the setup of secure internet services (analysis, product selection, implementation, documentation).

• Strong documentation skills and the ability to organize meetings and presentations.

• Able to work autonomously while being a strong team player.

Technical Knowledge

• Palo Alto PanOS (IDS/IPS, decryption, sandboxing, dynamic routing protocols – PCNSE certification is a plus)

• Cisco (Umbrella, Cisco ISE, WIFI, IPSec)

• Algosec (Firewall Analyzer & Fireflow, integration with SNOW)

• Automation (Terraform, GitLab, Ansible)

• Communication protocols: IPv4/IPv6, HTTP(S), FTP(S), SMTP, SSH, SSL/TLS, BGP, Syslog, SNMP, LDAP, Radius, HSRP/VRRP.

Practical Information

• Full-time assignment (with partial remote work possible – minimum 50% on-site in Brussels).

• Flexibility required to perform changes outside business hours or during weekends if necessary.