Overview

Cybersecurity Network Security Specialist (Warsaw, 70% remote) – EU Public Organisations Jobs in Warsaw, Mazowieckie, Poland at TheWhiteam

Title: Cybersecurity Network Security Specialist (Warsaw, 70% remote) – EU Public Organisations

Company: TheWhiteam

Location: Warsaw, Mazowieckie, Poland

Profile: Cybersecurity Network Security Specialist (Network Security, Application Delivery, Local Area Networking, Wide Area Networking, Cloud Networking, Data Center Networking, Network Management, SDN) – Level Advanced.

Securiy Clearance: Is required (security screening procedure must be initiated within first 45 days of assignment) – CONFIDENTIEL UE/EU CONFIDENTIAL.

Place of performance: Frontex Headquarters in Warsaw. 30% onsite + 70% remote.

Duration of the mission: 48 months.

Award criteria: 35% Price / 65% Quality.

Minimum required scoring for interview (%): 60%.

Minimum level of education: Level 4.

Minimum English language skills (CEFR): B2.

Minimum IT relevant professional experience (years): 5 years.

Minimum experience at similar position (years): 5 years in relevant IT roles.

Rate: 460-483€/day NWH 600-628€/day EWH.

  • NWH: 220 days x 4 years.
  • EWH: 30 days x 4 years.

Required Certificates

  • CCNP Security or equivalent from other network vendors (e.g. Palo Alto certifications).

Knowledge And Skills

knowledge:

  • Very good understanding of TCP/IP protocols, IP routing, Network Security Policies
  • Good knowledge of network services like DNS, DHCP, NTP, etc.
  • Good understanding of the wired and wireless access technologies (wifi, 802.1x/EAP etc.).
  • Good understanding of the application-layer authentication and encryption mechanisms, e.g. HTTPS/SSL/TLS protocols, PKI and X.509 certificates.
  • Hands-on experience with the products and solutions related to the domain (e.g. Cisco routers and switches, wireless controllers, network firewalls etc.).
  • Hands-on experience in administering of a large enterprise network.
  • Good knowledge of the network configuration of the endpoint operating systems (Windows, Linux, IOS etc.).
  • Work experience with stateful and stateless traffic filtering.

Skills:

  • Excellent communication skills both technical and non-technical (in written and verbal communication).
  • Very good analytical and trouble-shooting skills.
  • Open minded, excellent troubleshooting, analytical and problem solving skills.
  • Very strong sense of responsibility, accuracy and attention to details.
  • Sense of tact and diplomacy.
  • Friendly, supportive and helpful personality with co-operative and service oriented attitude.
  • Ability to work in stressful environment with minimal supervision.
  • High level of motivation and initiative, creating thinking.
  • A proactive attitude and team-work spirit.

Other:

  • Able to travel occasionally inside Europe (plane, boat, car etc.) up to 10 travels/year.
  • Driving license card. B.
  • Ability to drive rented car, including abroad.

Specific requirements:

The following additional certifications are desirable for this assigment:

  • CCSP (Certified Cloud Security Professional) or equivalent.
  • AZ-305: Designing Microsoft Azure Infrastructure Solutions or equivalent.

Good knowledge and hands-on experience in the area of local network:

  • Manage Palo Alto Firewalls using Panorama; Manage Cisco Switching based networks; Manage Palo Alto GlobalProtect at scale; Internet edge forward-proxy / outbound security on Palo Alto; Advanced troubleshooting (packet + firewall dataplane); Verification of security Firewall security rules, identification of gaps and provisions of improvements or corrections; VPN design plus operations at scale; 802.1X/EAP & NAC integration (provide examples of known specific brands).

Good knowledge and hands-on experience in the area of Cloud Networking:

  • Hub-and-spoke / landing zone networking: design and operate VNets, subnets, peering (incl. cross-subscription), segmentation, route isolation; Network security enforcement: implementing and troubleshooting NSGs/ASGs, service tags, and the “why is this flow blocked” workflow using effective security rules; Private access patterns: Private Link/Private Endpoints, Private DNS Zones, DNS forwarding/resolution across on-prem ↔ Azure; Hybrid connectivity: operating and troubleshooting Site-to-Site VPN and/or ExpressRoute (BGP basics, failover, throughput/MTU, tunnels, active/active patterns).

Good knowledge and hands-on experience in the area of SASE/SSE:

  • Remote access & ZTNA; Traffic steering / routing; TLS inspection / decryption operations; Threat protection at the edge; Identity integration; Migration experience: Proven migration from on-prem proxy/VPN to SASE/SSE: phased rollout; exceptions handling, legacy apps, rollback strategy, stakeholder communications.

Good knowledge and hands-on experience in the area of Zero Trust Networking:

  • Policy based on identity + device posture; Microsegmentation / least privilege: Designing segmentation for east-west and north-south traffic: tiers, zones, app dependency mapping, deny-by-default between segments, controlled egress.

Proven knowledge and hands-on experience in the area of WAF / LoadBalancer:

  • Web Application Firewall solutions (e.g. F5, Cloudflare, Citrix); LoadBalancing technologies.

Typical Tasks And Responsibilities

  • Administer, monitor and troubleshoot network security solutions specific to the domain.
  • Provide 2nd line support to Frontex system and network users.
  • Create and update the technical documentation and operating procedures.
  • Advice possible network security improvements, changes or upgrades.

Apply

Upload your CV/resume or any other relevant file. Max. file size: 800 MB.