freelancer » Informations- und Kommunikationstechnologie » IT Sicherheit
freiberufler Senior Cyber & Network Security Engineer | Firewall: Palo Alto (PCNSE), Check Point, Fortinet, Cisco | Zero Trust auf freelance.de

Senior Cyber & Network Security Engineer | Firewall: Palo Alto (PCNSE), Check Point, Fortinet, Cisco | Zero Trust

online
  • auf Anfrage
  • 077010 Bucharest
  • Europa
  • en  |  ro
  • 05.11.2026
  • Contract ready
Jetzt registrieren & Kontakt aufnehmen

Kurzvorstellung

Firewall & network security engineer, 10+ years: Palo Alto (PCNSE), Check Point, Fortinet, Cisco FTD, Zscaler, Cloudflare Zero Trust, Forescout NAC. CCNP. Remote B2B contracts via own company, onsite in 1-week blocks. Available now.

Geschäftsdaten

 Gewerbetreibend
 Steuernummer bekannt
 Berufshaftpflichtversicherung aktiv

Qualifikationen

  • Check Point (allg.)4 J.
  • Cisco Firewalls4 J.
  • Cyber Security Engineer4 J.
  • Firewalls4 J.
  • Fortigate Firewalls3 J.
  • Netzwerk-Sicherheit7 J.
  • Netzwerkingenieur3 J.
  • Palo Alto
  • Secure Access Service Edge (SASE)
  • Security Operations Center (SOC)4 J.

Projekt‐ & Berufserfahrung

Network Access Control Engineer (Forescout) (Festanstellung)
NHS England, London
4/2022 – offen (4 Jahre, 8 Monate)
Gesundheitswesen
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Forescout Network Access Control across the hospital estate.

- Agentless discovery, device classification and profiling, real-time visibility of managed, unmanaged, BYOD and connected medical (IoMT) devices
- NAC policy with eyeSight and eyeControl: 802.1X and RADIUS, posture and compliance checks, guest and BYOD onboarding, automated quarantine and VLAN remediation
- Network segmentation isolating clinical and medical device networks from the corporate estate; integration with switching, wireless and SIEM

Eingesetzte Qualifikationen

Cyber Security Engineer, Netzwerk-Sicherheit, Network Architect

Multi-vendor Security Engineer - Zero Trust, SOC & NGFW (Festanstellung)
Paragon, London
4/2022 – offen (4 Jahre, 8 Monate)
Dienstleistungsbranche
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Multi-vendor security engineer across perimeter, endpoint, identity, data and application layers.

- Check Point R8x, Palo Alto NGFW with Panorama, Cisco ASA / Firepower FTD with FMC
- Splunk and Elastic Security correlation searches and dashboards; Cortex XDR and CrowdStrike Falcon EDR, threat hunting and host containment
- Cloudflare Zero Trust: Access policies, Tunnel, WARP enrolment, device posture, Gateway DNS/HTTP filtering; Cloudflare WAF, CDN and DDoS with API automation
- Zscaler ZIA and ZPA, Imperva WAF, F5 BIG-IP
- CyberArk PAM, Symantec DLP, Rapid7 InsightVM
- 24/7 on-call, CAB, daily work with client network, infrastructure and development teams

Eingesetzte Qualifikationen

Cyber Security Engineer, Check Point (allg.), Firewalls, Netzwerk-Sicherheit, Security Operations Center (SOC)

Check Point Security Engineer (Festanstellung)
Ferring Pharmaceuticals, Saint-Prex
4/2022 – offen (4 Jahre, 8 Monate)
Life Sciences
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Dedicated Check Point security engineer, owning the R8x estate end to end: Security Management Server, Multi-Domain Management, ClusterXL gateway clusters and Gaia OS.

- Policy design in SmartConsole: access control and NAT rule bases, ordered and inline layers, policy packages
- Blades: IPS, Application Control, URL Filtering, Anti-Bot, Anti-Virus, Threat Emulation, Identity Awareness
- Site-to-site and Remote Access VPN communities
- 24/7 on-call, P1/P2 incident response, cluster failover handling; troubleshooting via SmartEvent, SmartLog, fw monitor, CPView, cpinfo
- CAB and ECAB change management in ServiceNow, Jumbo Hotfix takes, major version upgrades, RMA

Eingesetzte Qualifikationen

Cyber Security Engineer, Check Point (allg.), Firewalls, Netzwerk-Sicherheit

Senior Firewall & Network Security Engineer (Festanstellung)
Safran, Paris
4/2022 – offen (4 Jahre, 8 Monate)
Luft- und Raumfahrtindustrie
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Primary firewall and network security engineer for a 100,000+ device global estate (on-premises, AWS and Azure) across the US, Europe, the UAE and India.

- Palo Alto PA-Series / VM-Series through Panorama: device groups, template stacks, security policy, NAT, App-ID, User-ID, URL Filtering, WildFire, SSL decryption
- Cisco ASA and Firepower FTD through FMC: ACLs, NAT, IPsec VPN, failover pairs
- Forcepoint DLP and Web Security policy
- Layer 3-7 troubleshooting, packet capture, HA failover diagnosis, root cause analysis
- SOC monitoring, alert triage and incident response across firewall, DLP and web telemetry
- PAN-OS / FTD upgrades, hardware refresh and RMA under CAB approval in ServiceNow
- Cloud policy: AWS security groups and Transit Gateway, Azure VNet, NSGs and Azure Firewall
- Final escalation point for regional L1/L2 teams, runbooks and configuration standards

Eingesetzte Qualifikationen

Cyber Security Engineer, Cisco Firewalls, Firewalls, Netzwerk-Sicherheit, Security Operations Center (SOC)

Senior Cyber Security Engineer - Firewall, SD-WAN & SOC (Festanstellung)
Nederlandse Spoorwegen (NS), Utrecht
4/2022 – offen (4 Jahre, 8 Monate)
Logistikdienstleister
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Security engineer on the Dutch national rail estate, embedded with the client's Dutch and Belgian network, infrastructure and service teams.

- Check Point R8x (SmartConsole, SmartEvent): access control and NAT rule bases, policy layers, VPN communities, gateway clusters
- Juniper Session Smart Router (SSR) and Mist SD-WAN across rail operations sites: service-centric routing, tenant isolation, Zero Trust segmentation
- F5 BIG-IP (virtual servers, SSL/TLS offload, WAF), Imperva WAF, Akamai CDN / WAF / DDoS
- Forcepoint DLP policy design, data classification and incident triage
- Elastic Security / SIEM: correlation rules, detection content, alert triage, threat hunting
- Rapid7 InsightVM vulnerability management, Infoblox DDI (DNS / DHCP / IPAM)
- 24/7 on-call, P1/P2 major incident response, CAB under ITIL change management in ServiceNow

Eingesetzte Qualifikationen

Cyber Security, Firewalls, Informationssicherheit, Ipsec, IT Sicherheit (allg.), Incident-Management, ITIL, IT Service Management (ITSM), Load Balancing, DNS, Netzwerkadministration (allg.), Netzwerkmanagement, TCP / IP, VPN, WAN, Elasticsearch, Computernetzwerke, Servicenow, Netzwerktechnik, DIN EN ISO 27001, Check Point (allg.), Cyber Security Engineer, Juniper, Network Architect, Netzwerk-Sicherheit, Security Operations Center (SOC)

Network Security Architect (Festanstellung)
Quartz Matrix (Cisco, Meraki & Fortinet partner), Bucharest
5/2019 – 4/2022 (3 Jahre)
IT & Entwicklung
Tätigkeitszeitraum

5/2019 – 4/2022

Tätigkeitsbeschreibung

Greenfield network and security architectures for government, education and enterprise clients (incl. Delphi, Continental), manufacturing, energy and utilities.

- Full lifecycle: requirements, site surveys, HLD / LLD, BoM, implementation, cutover, acceptance testing, handover
- Cisco Catalyst, ISR / ASR, ASA and Firepower FTD, wireless; BGP, OSPF, EIGRP, VLAN, STP, QoS
- Cisco Meraki full stack; Fortinet FortiGate with FortiManager, FortiSwitch, FortiAP
- Security policy, NAT, IPsec and SSL-VPN across Palo Alto, Cisco, Meraki, Check Point and Fortinet
- Reduced SIEM false positives by 60% through Palo Alto ACC, Expedition and Cortex Data Lake tuning
- Pre-sales engineering, proposals, public tender documentation, PoC builds

Eingesetzte Qualifikationen

Fortigate Firewalls, Netzwerk-Sicherheit, Cisco-Netzwerkspezialist, Network Architect, Netzwerkingenieur

Senior IT Service Desk Engineer - Network Support (Festanstellung)
Ladbrokes Coral, London
6/2015 – 12/2017 (2 Jahre, 7 Monate)
Tourismus und Freizeitwirtschaft
Tätigkeitszeitraum

6/2015 – 12/2017

Tätigkeitsbeschreibung

2nd line Layer 2/3 support for Cisco routers, switches and Meraki access points across 1,000+ UK and Ireland locations; configuration templates and scripts for 1,000+ Cisco devices; major incident and security incident handling under ITIL.

Eingesetzte Qualifikationen

Support Engineer Netzwerke, Netzwerkadministrator

Weitere Projekt‐ & Berufserfahrung anzeigen

Ausbildung

Cyber Security and Network Engineering
Bachelor of Engineering
"Vasile Alecsandri" University of Bacău
2021
Bacău

Über mich

Senior Cyber Security and Network Engineer with 10+ years of experience designing, deploying and operating enterprise security architectures across on-premises data centers, Microsoft Azure and AWS.

Currently primary security engineer on five global enterprise accounts in Aerospace & Defense Manufacturing, Big Pharma, Rail & Transport, Healthcare and Public Sector, protecting estates of up to 100,000+ devices, with 24/7 on-call incident response and SOC monitoring.

WHAT I DELIVER
- Next-generation firewalls: Palo Alto PA-Series / VM-Series with Panorama, Check Point R8x (Multi-Domain Management, ClusterXL, Gaia), Cisco FMC / FTD / ASA, Fortinet FortiGate and FortiManager - policy design, NAT, SSL decryption, IPS tuning, upgrades, HA and migrations
- Zero Trust & SASE: Cloudflare Zero Trust (Access, Tunnel, WARP, Gateway), Zscaler ZIA / ZPA, IPsec and SSL-VPN design
- Network Access Control & segmentation: Forescout eyeSight / eyeControl / eyeSegment, 802.1X and RADIUS, device classification and posture, isolation of clinical, medical (IoMT) and operational device networks
- Network architecture: greenfield HLD / LLD, BGP, OSPF, EIGRP, VLAN segmentation, QoS, SD-WAN (Juniper SSR & Mist, Cisco Meraki), Infoblox DDI
- Detection & response: Splunk, Elastic Security, Cortex XDR, CrowdStrike Falcon - correlation rules, alert triage, threat hunting, root cause analysis
- Data & application protection: Forcepoint DLP, Symantec DLP, CyberArk PAM, Imperva WAF, F5 BIG-IP, Akamai and Cloudflare WAF / DDoS, Rapid7 InsightVM
- Compliance & process: ISO 27001, NIST CSF, GDPR, NIS2, ITIL v4, CAB / ECAB change management in ServiceNow

CERTIFICATIONS
PCNSE (Palo Alto Networks Certified Network Security Engineer) - CCNP Enterprise - CCNA R&S - Cisco Meraki CMNA - Fortinet NSE 1-3 - ITIL Foundation

WORKING MODEL
- B2B contract through my own registered company (EU VAT number, reverse charge invoicing)
- Remote-first; onsite at the client in blocks of about a week whenever the project needs it
- EU citizen, no work permit required
- Available immediately

KEYWORDS / STICHWORTE
Netzwerksicherheit, IT-Sicherheit, Informationssicherheit, Firewall-Administration, Firewall-Migration, Netzwerkarchitektur, Netzwerksegmentierung, Zero Trust, ZTNA, SASE, NAC, NGFW, SIEM, SOC, Palo Alto, Check Point, Fortinet, Cisco, Zscaler, Cloudflare, Remote.

Weitere Kenntnisse

Palo Alto Networks, PAN-OS, Panorama, Cortex XDR, Check Point, Cisco Firepower (FMC/FTD), Cisco ASA, Cisco Meraki, Fortinet FortiGate, FortiManager, Juniper, Mist SD-WAN, Zscaler ZIA/ZPA, Cloudflare Zero Trust, Forescout NAC, 802.1X, Splunk, Elastic, CrowdStrike, CyberArk, Forcepoint DLP, Imperva WAF, F5 BIG-IP, Akamai, Infoblox, Rapid7, Azure, AWS, ServiceNow, BGP, OSPF, EIGRP, IPsec VPN, SSL-VPN, SD-WAN, SASE, ZTNA, NGFW, IDS/IPS, SIEM, SOC, Firewall-Migration, Firewall-Administration, Netzwerksicherheit, IT-Sicherheit, Informationssicherheit, Netzwerkarchitektur, Netzwerksegmentierung, ISO 27001, NIST CSF, NIS2, ITIL

Persönliche Daten

Sprache
  • Englisch (Muttersprache)
  • Rumänisch (Muttersprache)
Reisebereitschaft
Europa
Arbeitserlaubnis
  • Europäische Union
  • Schweiz
  • Vereinigte Staaten von Amerika
Home-Office
bevorzugt
Profilaufrufe
53
Berufserfahrung
11 Jahre und 5 Monate (seit 06/2015)

Kontaktdaten

Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.

Jetzt Mitglied werden