Infrastructure Security Engineer (PID0620)

Infrastructure Security Engineer (PID0620)

This is a remote contract position offering a daily rate. The role focuses on the engineering and operation of security services within a sophisticated software stack, prioritising script-based implementation to enhance efficiency and standardisation across large-scale infrastructure. 1 FTE - 40 hours per week.

English is the only language requirement.

Occasional onsite in Germany.

Responsibilities

• Develop and implement detailed security deployment plans, outlining phases, resource requirements, and timelines for complex environments.
• Lead the installation and configuration of security solutions, ensuring all setups align with defined architectural standards and industry best practices.
• Maintain precise, thorough documentation of the security environment, including protocols, configurations, and decision justifications to ensure a clear audit trail.
• Continuously validate implementation processes and identify opportunities for automation or corrective actions to improve efficiency and reduce manual errors.
• Collaborate with cross-functional teams, including Architects and DevOps, to promote a security‑by‑design approach and share technical expertise across the wider community.
• Support the regular update of documentation to reflect improvements and track process execution for compliance and audit purposes.

Requirements

• Senior‑level experience in security engineering and delivery within large‑scale enterprise and data centre environments.
• Fluent English (at least C1 level) in both written and spoken communication.
• Proven track record in designing secure network architectures, including Zero Trust, micro‑segmentation, and LAN/WAN.
• Strong technical proficiency in firewalls (Palo Alto, Checkpoint, Fortinet), IDS/IPS, NAC, proxies, and load balancers (F5, Radware).
• Experience with network virtualisation and SDN (ACI, NSX), as well as VXLAN/EVPN and secure multi‑tenant networking.
• Deep understanding of DNS architecture and operations, including platforms like Infoblox and Linux‑based services.
• Experience with configuration management tools (Ansible) and technical scripting (Python), and liaison with Design Architects, Platform Engineering, and Portfolio management functions.
• Familiarity with ensuring compliance for ISO 27001, NIST, and GDPR standards.
• Experience with Jira and Confluence.
• SIEM operations/threat experience.
• Eligibility Residency in the EU, EEC, UK, or Switzerland.