Senior Network Security Engineer

Senior Network Security Engineer

NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach.Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento, NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability.Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada.

Role Description

We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures.The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions.

Key Responsibilities

• Design and manage security architectures based on Next-Generation Firewalls (NGFW).
• Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments.
• Perform configuration, policy management, and advanced troubleshooting on multi-vendor equipment.
• Manage perimeter and internal security within Enterprise environments.
• Conduct log analysis, incident management, and system hardening.
• Provide technical mentoring for junior team members (optional, if required).

Fundamental Technical Requirements (Must-Have)

The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies:

Palo Alto Networks:

• Advanced configuration and management of NGFW (PA Series).
• Solid experience with Panorama for centralized management.
• Proven experience with SASE solutions (Prisma Access) and GlobalProtect.

Fortinet:

• Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection).
• Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer).

Cisco Security:

• Experience with Cisco Security solutions (Firepower/FTD, ASA).
• Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus.

F5 Networks:

• Implementation and management of F5 BIG-IP solutions.
• Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules.

Soft Skills & Additional Requirements:

• Minimum of 5+ years of experience in Network Security Engineering roles.
• Excellent troubleshooting and problem-solving skills under pressure.

Preferred Certifications (Nice-to-Have):

• Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer).
• Fortinet: NSE 4 / NSE 7.
• Cisco: CCNP Security or CCIE Security.
• F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS).

Introduce Yourself (Screening Questions):

• Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?
• Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?

What We Offer:

• Salary commensurate with experience.
• Structured training and certification plans.
• Corporate benefits: Welfare Plan, Smart Working.