For our costumer, we are looking for a Senior Network Security Engineer / Delivery Lead (m/f/d).

Capacity: Full-time

Start: 18th of May 2026

End: 31st of December 2026 + possible Extension

Location: Mainly remote, sometimes in Berlin / FFM

Tasks:

Objective: Security Delivery

Tasks:

- Development of a detailed security deployment plan that outlines each phase of implementation.

- Identifying necessary resources and timelines required for deploying security measures within the scope environment.

- Implementation and execution of the deployment plan, installing and configuring security solutions as outlined.

- Ensuring configurations meet defined security standards and best practices.

Objective: Documentation:

Tasks:

- Providing and maintaining thorough and precise documentation of the security environment, including configurations, protocols, and decision justifications.

- Update documentation regularly to reflect changes or improvements made during implementation.

- Utilize detailed documentation to track process execution and identify potential improvements or compliance issues.

Objective: Continuous Improvement, Adaptation and Validation

Tasks:

- Ensure all process-related actions and decisions are well-documented, providing a clear audit trail and facilitating future updates.

- Continuously validate implementation processes to ensure they are effective and aligned with organizational goals.

- Identify any discrepancies or inefficiencies in processes and propose corrective actions.

Profile Requirements

The contractor must be at a senior level in security engineering and delivery with proven skills and experience in enterprise and datacenter environments in a large-scale data center context.

Must-have experience

- Experience in designing secure network architectures, including LAN/WAN, Zero Trust, and network segmentation/micro-segmentation.

- Proven ability to lead network security assessments, projects, policy development, and deliver technical guidance and best practices

- Experience in maintaining awareness of technological developments, anticipating their impact, and promoting a security-by-design approach in collaboration with stakeholders.

- Experience in sharing expertise and best practices within an Information Security architecture community.

- Strong knowledge of and experience with network security technologies such as firewalls (Palo Alto, Checkpoint, Fortinet, Cisco), IDS/IPS, NAC, proxies, VPNs, load balancers (F5, A10, Radware), SD-WAN, DDoS protection, SASE, VXLAN/EVPN, secure multi-tenant networking, and network virtualization (SDN, ACI, NSX).

- Experience in troubleshooting, optimizing network performance, and applying security best practices, with strong knowledge of DNS architecture and operations

- Experience working with DNS management platforms (e.g., Infoblox), Linux-based DNS services (e.g., BIND), and managing DNS zones and records in enterprise/hybrid environments.

- Experience with automation using Ansible and scripting in Python, and collaborating with Architects, DevOps, Portfolio teams, and other stakeholders.

- Familiarity with ensuring network security compliance for ISO 27001, NIST, GDPR, and SOC2 standards

Must-have language skills:

fluent English in speech and writing (at least C1)

Preferred experience

- Experience with Jira, Confluence and Miro or similar tools

- Linux knowledge (Advanced)

- SIEM Operations, Threat Hunting