Junior Network Security Engineer

A key objective of the position is to support the team in reducing the operational ticket backlog while maintaining service quality, security, and accurate documentation. The role performs initial analysis and troubleshooting, resolves standard and recurring requests based on documented procedures, and escalates complex issues to experienced engineers, the Network Security Architect, vendors, or service providers when required.

The position also supports platform monitoring, maintenance, lifecycle activities, audits, control reviews, documentation, and continuous service improvement. The Junior Network Security Engineer works under the guidance of experienced team members and gradually develops broader technical knowledge and operational responsibility across the Network Security & Trust service portfolio.

We offer:

1. Incident, Service Request and Change Processing – 35%

Process Network Security & Trust incidents, service requests, tasks, and standard changes using the designated IT service-management tool.

Perform initial analysis, troubleshooting, classification, prioritization, and documentation of incoming tickets.

Resolve standard and recurring issues by following approved procedures, knowledge articles, technical standards, and operational runbooks.

Support the team in reducing the ticket backlog through structured processing, regular follow-up, and accurate status updates.

Monitor assigned tickets and ensure timely processing in line with agreed priorities and service levels.

Collect relevant technical information, logs, configurations, and error details before escalating complex cases.

Escalate security-critical, high-impact, or technically complex issues to senior engineers, architects, vendors, or service providers.

Support the planning, testing, documentation, and implementation of standard and low-risk changes.

Participate in incident reviews, problem investigations, and root cause analysis under the guidance of experienced team members.

Create and maintain knowledge articles, troubleshooting instructions, and operational runbooks for recurring issues.

2. Firewall Operations and Security Policy Support – 25%

Support the daily operation, monitoring, maintenance, and health checking of enterprise firewall services across on-premises, cloud, edge, and industrial environments.

Implement approved firewall-rule, object, NAT, and security-policy changes by following established procedures and technical standards.

Validate requests for completeness, approvals, ownership, source and destination information, ports, protocols, and business justification.

Support the review, modification, deactivation, and removal of firewall rules and objects.

Assist with firewall rule reviews, recertification, cleanup, and policy-optimization activities.

Perform initial troubleshooting of firewall, NAT, security-policy, and communication-flow issues.

Monitor firewall availability, capacity, performance, and operational alerts and escalate deviations where required.

Support firewall platform maintenance, upgrades, backup and restore activities, and operational readiness checks.

Maintain accurate firewall configuration records, operating procedures, diagrams, and technical documentation.

3. VPN, Partner Connectivity and Segmentation Operations – 15%

Support the implementation, maintenance, monitoring, and troubleshooting of site-to-site IPsec VPN connections.

Process standard requests related to business partner, service provider, cloud, and third-party connectivity.

Assist with the implementation and maintenance of approved network-segmentation controls, security zones, and controlled communication paths.

Support NAC and microsegmentation activities from a network-security and policy-enforcement perspective.

Perform initial troubleshooting of VPN availability, tunnel status, encryption parameters, network-security policies, and connectivity dependencies.

Maintain accurate configuration, ownership, approval, and lifecycle information for VPN and partner-connectivity services.

Support periodic reviews, recertification, deactivation, and removal of obsolete VPN connections and communication paths.

Coordinate operational tasks with internal infrastructure teams, external partners, vendors, and managed service providers.

4. PKI and Certificate Operations – 10%

Process standard certificate requests and support the issuance, deployment, renewal, replacement, revocation, and retirement of digital certificates.

Support operational activities related to Public Key Infrastructure and Certificate Lifecycle Management.

Monitor certificate validity, upcoming expirations, service alerts, and certificate-related operational events.

Assist application owners, infrastructure teams, network teams, and service providers with standard certificate requests and lifecycle activities.

Perform initial troubleshooting of certificate enrollment, expiration, trust-chain, revocation, validation, and TLS-related issues.

Maintain accurate certificate inventory, ownership, lifecycle, configuration, and operational information in the designated systems of record.

Support the onboarding of applications, infrastructure platforms, network devices, users, and machine identities to approved certificate services.

Support PKI and CLM platform maintenance, control reviews, audits, backup and restore activities, and operational documentation.

Escalate complex issues related to PKI, Certificate Authorities, cryptography, trust models, or certificate integration to the responsible specialists.

5. Service Reliability, Lifecycle and Compliance Support – 10%

Perform recurring operational checks and maintenance activities for Network Security & Trust services.

Support platform lifecycle activities, including software updates, upgrades, configuration reviews, backup verification, and operational readiness checks.

Assist with monitoring service health, availability, capacity, certificate expiration, policy compliance, and operational risks.

Support technical audits, control assessments, evidence preparation, recertification activities, and remediation of operational findings.

Maintain the operational and technical documentation required for the assigned services and activities.

Perform assigned activities in accordance with approved security standards, change procedures, separation-of-duties requirements, and operational controls.

Contribute to service reporting by providing accurate ticket, incident, change, lifecycle, and operational information.

Identify recurring issues, missing documentation, and operational risks and communicate them to the responsible senior team members.

6. Continuous Improvement and Automation Support – 5%

Contribute to the standardization and simplification of recurring operational activities.

Identify repetitive tasks that may be suitable for templates, scripts, workflows, APIs, or other forms of automation.

Support the testing and use of approved automation for configuration validation, reporting, certificate lifecycle processing, and operational checks.

Assist senior engineers and architects with technical testing, implementation activities, and operational handover.

Contribute to the improvement of knowledge articles, troubleshooting procedures, request forms, and operational runbooks.

Participate in team knowledge-sharing, technical training, service reviews, and continuous-improvement activities.

Interfaces:

Internal:

Network Security & Trust team and Network Security Architect

Related infrastructure, network, cloud, workplace, application, and Cyber Security teams

IT service-management and support functions

Regional IT teams, system and application owners, and project teams

Architecture, risk, compliance, and audit functions

External:

Managed Network Security & Trust service providers

Firewall, VPN, N