Главный специалист по сетевой безопасности

About the role

We are looking for a highly skilled specialist to lead the design, implementation and maintenance of our network security infrastructure. The role involves protecting critical assets across multiple sites and ensuring compliance with security policies.

Key responsibilities

• Administer and secure network equipment from vendors such as MikroTik, Huawei and Palo Alto.
• Design, deploy and manage security policies on next‑generation firewalls (NGFW).
• Establish and maintain secure communication channels and VPN tunnels (IPsec, L2TP, OpenVPN, GRE) between locations and remote sites.
• Monitor network traffic, detect anomalies and implement DDoS mitigation measures at the perimeter and within the network.
• Conduct vulnerability management: regular scanning, prioritisation, remediation tracking and documentation.
• Perform internal security audits, analyse configurations, ensure policy compliance and prepare reports for management.
• Configure, tune and maintain IDS/IPS systems, reduce false positives and develop custom signatures.

Required profile

• Proven experience with MikroTik RouterOS, including VPN creation, firewall rules and traffic shaping.
• Hands‑on knowledge of Huawei network security equipment and Huawei NGFW.
• Strong background in Palo Alto Networks (Panorama, PAN‑OS, App‑ID, User‑ID, Threat Prevention) and FortiGate (FortiOS, FortiManager) technologies.
• Deep understanding of the OSI model, TCP/IP stack and protocols such as UDP, HTTP/HTTPS, DNS, DHCP and SNMP.
• Practical experience with dynamic routing protocols (OSPF, BGP, EIGRP).
• Experience in vulnerability management using scanning tools, CVSS prioritisation and coordination with operations teams.
• Ability to conduct security audits using checklists like CIS Benchmarks.

Required skills

• MikroTik RouterOS
• Huawei network equipment
• Palo Alto Networks (Panorama, PAN‑OS, App‑ID, User‑ID, Threat Prevention)
• FortiGate (FortiOS, FortiManager)
• NGFW configuration
• IDS/IPS configuration and signature development
• VPN technologies (IPsec, L2TP, OpenVPN, GRE)
• OSI model, TCP/IP, UDP, HTTP/HTTPS, DNS, DHCP, SNMP
• OSPF, BGP, EIGRP
• Vulnerability management tools and CVSS
• CIS Benchmarks audit methodology

What we offer

• Work schedule: 5 days on, 2 days off, 08:00‑17:00
• Medical insurance
• Company‑provided meals