L3 Security Engineer

Stellenbeschreibung:

NOTE: Candidates who do not meet the location and citizenship, or clearance eligibility requirements will not be considered due to project compliance requirements and will be rejected!

Senior Firewall Engineer

Location: Germany (permanent contract under German labor law)

Start: Q1 2026

Contract type: Full-time, permanent (no freelancers)

Languages: English (professional proficiency), German is a plus

About the Role

TH3RA Consulting is expanding our Security Engineering team and seeking Senior Firewall Engineers with a strong focus on automation. You’ll design, automate, and operate security controls across complex enterprise environments, working closely with architects and customer stakeholders.

What You’ll Do

Design and implement firewall policies and automation workflows.
Drive API-based policy changes and CI/CD for network security.
Build and maintain Ansible playbooks and reusable automation modules.
Collaborate via GitHub (PRs, code reviews, branching strategy).
Document solutions using Wiki and JIRA; engage directly with customers to clarify requirements.
Contribute to containerized platforms (Kubernetes, Docker) for security tooling.

Must-Have Skills

Senior-level hands-on with Check Point (CP), or Fortinet (FN), or Palo Alto Networks (PAN), or Cisco ASA — including API-driven changes.
Strong programming/scripting: Python, .NET, Bash.
Tufin and TOS Aurora expertise (incl. ST/SC API).
Experience creating Ansible playbooks for network/security automation.
Solid Linux administration.
Comfortable reading/understanding others’ code; strong analytical and questioning mindset.
Familiarity with Kubernetes and Docker in production contexts.

Security & Eligibility (mandatory)

Due to project and clearance requirements:

Willing and eligible to obtain SÜG security clearance, level Ü2 (Ü2 already held is a strong plus).
No close family ties in high-risk countries.
Citizenship: Must be a citizen of a country that is both an EU and NATO member.

Why TH3RA