Network Security Engineer

Mission

The Network Security Engineer is responsible for the design, implementation, protection, and maintenance of network infrastructures in enterprise environments. The role focuses on firewalls, switching, routing, segmentation, and secure connectivity to ensure reliable, resilient, and well-controlled network operations.

Key Accountabilities

Network Security Engineering

• Design, implement, and maintain secure network architectures using FortiGate firewalls and Cisco Catalyst and Nexus switching infrastructures.
• Configure and optimize routing, switching, firewall policies, VPN connectivity, and network access controls.Implement secure segmentation to separate users, systems, and critical services based on business and security requirements.
• Support the integration of network components in on-premises and hybrid environments.

Configuration & Troubleshooting

• Review and validate network configurations, access policies, ACLs, and firewall rules.
• Resolve connectivity, performance, and policy enforcement issues in complex network environments.
• Identify and correct misconfigurations, weak security controls, and exposure points.
• Support operational continuity through structured analysis and rapid issue resolution

Infrastructure Hardening & Maintenance

• Harden network devices and supporting infrastructures according to security best practices.
• Support patch management, firmware updates, and secure lifecycle maintenance of network platforms.
• Maintain consistent configuration standards across routers, switches, and firewalls.
• Contribute to the stability, availability, and security of the infrastructure.

Monitoring & Visibility

• Support network logging, traffic analysis, and visibility through security and monitoring platforms.Integrate network devices with centralized logging and monitoring solutions as required.
• Contribute to the identification of anomalous traffic patterns, unauthorized access attempts, and policy violations.
• Enhance situational awareness of the network environment.

Reporting & Advisory

• Produce clear technical documentation on network risks, configurations, and remediation actions.
• Present findings and recommendations to technical stakeholders in a practical and operational manner.
• Support secure network design decisions and operational improvements.
• Collaborate with infrastructure, security, and operations teams to enhance resilience. 

#LI-DC4

Qualifications

• Solid experience in network security engineering and infrastructure administration.
• Hands-on knowledge of FortiGate firewalls and Cisco Catalyst and Nexus switching environments.
• Strong understanding of routing, switching, segmentation, VPN, and firewall policy management.
• Experience in troubleshooting, hardening, and maintenance of enterprise network infrastructures.
• Familiarity with network monitoring, logging, and traffic analysis.
• Scripting or automation skills are a plus.
• Fortinet and Cisco certifications are preferred.
• Italian and English language proficiency required.

Education

Competencies

Compensation Data

The salary range and job grade for this position are defined based on objective, role-related criteria, and responsibilities in accordance with CCNL RINA (CNEL code I480).

The gross annual salary range foreseen is between €42,000 and €50,000 and will be finally defined on candidate’s professional experience, qualifications, competencies, and overall alignment with the role.

In addition, an annual variable compensation component is provided, based on both Company and individual performance objectives in accordance with the current policies and collective agreements.

The overall compensation package is complemented by the Company's welfare.