Opis

                                        ROLE OVERVIEW

We are seeking a skilled and motivated Network & Security Engineer to join our IT team. In this role, you will serve as the second level of support for all network-related tasks, drive network security improvements, design and implement IPSec connections, and provide expert know-how solutions to complex infrastructure challenges.
You will work across private and public cloud environments and contribute to the continuous evolution of our network architecture. We value engineers who are open-minded, eager to explore emerging technologies, and enthusiastic about leveraging open-source solutions to build more flexible, transparent, and cost-effective infrastructure.

DUTIES & RESPONSIBILITIES

Network Support

Act as 2nd-line support for all network-related incidents, requests, and escalations
Diagnose and resolve complex network issues across LAN, WAN, and cloud environments
Collaborate with 1st-line support teams and escalate to vendors or 3rd parties when required

Network Security

Lead network security improvement initiatives, identifying vulnerabilities and implementing mitigations
Design, configure, and maintain IPSec VPN tunnels and site-to-site connections
Implement and manage Zero Trust Network Access (ZTNA) policies and Secure Service Edge (SSE) solutions
Monitor security events and respond to alerts across firewalls and network security platforms

Know-How & Solutions

Provide expert guidance and technical know-how solutions to internal teams and stakeholders
Document network architectures, configurations, and standard operating procedures
Evaluate and recommend new technologies — including open-source tools — to improve network performance and security posture
Participate in infrastructure projects, contributing to design and implementation phases
Proactively research and pilot emerging technologies, bringing innovative solutions to the team


REQUIREMENTS & TECHNICAL SKILLS

Azure Networking

Hands-on experience with Azure Network Security Groups (NSG), Load Balancers (LB), and Virtual Network Gateways
Proficiency configuring Azure Enterprise Applications and managing identity-based network access
Understanding of Azure Virtual Networks, peering, and hybrid connectivity (ExpressRoute/VPN)

Cisco Meraki

Experience designing and administering Cisco Meraki SD-WAN, MX security appliances, and MR access points
Ability to manage Meraki Dashboard, configure policies, and troubleshoot connectivity issues

SSE / ZTNA - Cloudflare or Cisco Secure Access

Practical experience with Cloudflare Access, Gateway, or equivalent Cisco Secure Access SSE solution
Solid understanding of Zero Trust principles and the ability to design and enforce ZTNA policies
Familiarity with DNS filtering, SWG (Secure Web Gateway), and CASB concepts

OPNsense Firewalls

Proficiency with OPNsense firewall administration, including IPSec tunnel configuration and management
Experience with firewall rule design, NAT, traffic shaping, and security hardening on OPNsense
Understanding of IDS/IPS integration and log analysis within OPNsense

Cloud Infrastructure

Solid understanding of private and public cloud networking concepts and hybrid architectures
Experience working across multi-cloud or hybrid environments (Azure, on-premises, co-location)
Ability to implement network segmentation and security controls across cloud and on-premise platforms


OPEN-SOURCE & INNOVATION MINDSET

We strongly value engineers who bring curiosity and a willingness to look beyond conventional vendor-locked solutions. The ideal candidate actively explores the open-source ecosystem and is comfortable evaluating, deploying, and contributing to community-driven tools.
What This Looks Like

Experience with or strong interest in open-source network and security tools (e.g., OPNsense, pfSense, WireGuard, Suricata, Zeek, Graylog, Wazuh, NetBox)
Willingness to evaluate open-source alternatives alongside commercial products and make evidence-based recommendations
Comfort working with Linux-based systems and CLI-driven network configuration
Enthusiasm for learning new technologies quickly and adapting to a rapidly evolving infrastructure landscape
A mindset of continuous improvement — always looking for better, more efficient, and more transparent ways to solve problems


NICE TO HAVE


Relevant certifications: CCNA/CCNP, AZ-700, or equivalent network/cloud certifications
Experience with network monitoring tools (e.g., PRTG, Zabbix, Grafana, Prometheus, or similar)
Scripting or automation skills (Python, Ansible, Terraform) for network configuration management
Knowledge of BGP, OSPF, or other dynamic routing protocols
Experience contributing to or maintaining open-source projects


WHAT WE OFFER


A dynamic and collaborative work environment with cutting-edge technology
Opportunities for professional growth and certification support
Competitive compensation package and flexible working arrangements
Involvement in exciting infrastructure projects across hybrid and cloud environments
Freedom to explore and implement open-source solutions that improve our stack


This job description outlines the primary responsibilities and requirements for the role. Additional duties may be assigned as business needs evolve.
                                

Originalni oglas sa Klix Posao