freelancer » Informations- und Kommunikationstechnologie » Netzwerkspezialisten
freiberufler Senior Cyber Security & Network Security Engineer (PCNSE, CCNP) auf freelance.de

Senior Cyber Security & Network Security Engineer (PCNSE, CCNP)

zuletzt online vor wenigen Stunden
  • 95€/Stunde
  • 600381 Bacău
  • Europa
  • en  |  ro
  • 22.10.2026
Jetzt registrieren & Kontakt aufnehmen

Kurzvorstellung

Senior Cyber Security & Network Engineer, 10+ years. Palo Alto, Check Point, Cisco, Fortinet, Zscaler, Cloudflare Zero Trust, Forescout NAC. PCNSE & CCNP. Available now for B2B contracts via my own company, remote with onsite blocks.

Geschäftsdaten

 Gewerbetreibend
 Steuernummer bekannt

Qualifikationen

  • Check Point (allg.)4 J.
  • Cisco Firewalls4 J.
  • Cyber Security Engineer4 J.
  • Firewalls4 J.
  • Fortigate Firewalls3 J.
  • Network Architect7 J.
  • Netzwerk-Sicherheit7 J.
  • Netzwerkingenieur3 J.
  • Secure Access Service Edge (SASE)
  • Security Operations Center (SOC)4 J.

Projekt‐ & Berufserfahrung

Network Access Control Engineer (Forescout) (Festanstellung)
NHS England, London
4/2022 – offen (4 Jahre, 7 Monate)
Gesundheitswesen
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Forescout Network Access Control across the hospital estate.

- Agentless discovery, device classification and profiling, real-time visibility of managed, unmanaged, BYOD and connected medical (IoMT) devices
- NAC policy with eyeSight and eyeControl: 802.1X and RADIUS, posture and compliance checks, guest and BYOD onboarding, automated quarantine and VLAN remediation
- Network segmentation isolating clinical and medical device networks from the corporate estate; integration with switching, wireless and SIEM

Eingesetzte Qualifikationen

Cyber Security Engineer, Netzwerk-Sicherheit, Network Architect

Multi-vendor Security Engineer - Zero Trust, SOC & NGFW (Festanstellung)
Paragon, London
4/2022 – offen (4 Jahre, 7 Monate)
Dienstleistungsbranche
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Multi-vendor security engineer across perimeter, endpoint, identity, data and application layers.

- Check Point R8x, Palo Alto NGFW with Panorama, Cisco ASA / Firepower FTD with FMC
- Splunk and Elastic Security correlation searches and dashboards; Cortex XDR and CrowdStrike Falcon EDR, threat hunting and host containment
- Cloudflare Zero Trust: Access policies, Tunnel, WARP enrolment, device posture, Gateway DNS/HTTP filtering; Cloudflare WAF, CDN and DDoS with API automation
- Zscaler ZIA and ZPA, Imperva WAF, F5 BIG-IP
- CyberArk PAM, Symantec DLP, Rapid7 InsightVM
- 24/7 on-call, CAB, daily work with client network, infrastructure and development teams

Eingesetzte Qualifikationen

Cyber Security Engineer, Check Point (allg.), Firewalls, Netzwerk-Sicherheit, Security Operations Center (SOC)

Check Point Security Engineer (Festanstellung)
Ferring Pharmaceuticals, Saint-Prex
4/2022 – offen (4 Jahre, 7 Monate)
Life Sciences
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Dedicated Check Point security engineer, owning the R8x estate end to end: Security Management Server, Multi-Domain Management, ClusterXL gateway clusters and Gaia OS.

- Policy design in SmartConsole: access control and NAT rule bases, ordered and inline layers, policy packages
- Blades: IPS, Application Control, URL Filtering, Anti-Bot, Anti-Virus, Threat Emulation, Identity Awareness
- Site-to-site and Remote Access VPN communities
- 24/7 on-call, P1/P2 incident response, cluster failover handling; troubleshooting via SmartEvent, SmartLog, fw monitor, CPView, cpinfo
- CAB and ECAB change management in ServiceNow, Jumbo Hotfix takes, major version upgrades, RMA

Eingesetzte Qualifikationen

Cyber Security Engineer, Check Point (allg.), Firewalls, Netzwerk-Sicherheit

Senior Firewall & Network Security Engineer (Festanstellung)
Safran, Paris
4/2022 – offen (4 Jahre, 7 Monate)
Luft- und Raumfahrtindustrie
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Primary firewall and network security engineer for a 100,000+ device global estate (on-premises, AWS and Azure) across the US, Europe, the UAE and India.

- Palo Alto PA-Series / VM-Series through Panorama: device groups, template stacks, security policy, NAT, App-ID, User-ID, URL Filtering, WildFire, SSL decryption
- Cisco ASA and Firepower FTD through FMC: ACLs, NAT, IPsec VPN, failover pairs
- Forcepoint DLP and Web Security policy
- Layer 3-7 troubleshooting, packet capture, HA failover diagnosis, root cause analysis
- SOC monitoring, alert triage and incident response across firewall, DLP and web telemetry
- PAN-OS / FTD upgrades, hardware refresh and RMA under CAB approval in ServiceNow
- Cloud policy: AWS security groups and Transit Gateway, Azure VNet, NSGs and Azure Firewall
- Final escalation point for regional L1/L2 teams, runbooks and configuration standards

Eingesetzte Qualifikationen

Cyber Security Engineer, Cisco Firewalls, Firewalls, Netzwerk-Sicherheit, Security Operations Center (SOC)

Senior Cyber Security Engineer - Firewall, SD-WAN & SOC (Festanstellung)
Nederlandse Spoorwegen (NS), Utrecht
4/2022 – offen (4 Jahre, 7 Monate)
Logistikdienstleister
Tätigkeitszeitraum

4/2022 – offen

Tätigkeitsbeschreibung

Security engineer on the Dutch national rail estate, embedded with the client's Dutch and Belgian network, infrastructure and service teams.

- Check Point R8x (SmartConsole, SmartEvent): access control and NAT rule bases, policy layers, VPN communities, gateway clusters
- Juniper Session Smart Router (SSR) and Mist SD-WAN across rail operations sites: service-centric routing, tenant isolation, Zero Trust segmentation
- F5 BIG-IP (virtual servers, SSL/TLS offload, WAF), Imperva WAF, Akamai CDN / WAF / DDoS
- Forcepoint DLP policy design, data classification and incident triage
- Elastic Security / SIEM: correlation rules, detection content, alert triage, threat hunting
- Rapid7 InsightVM vulnerability management, Infoblox DDI (DNS / DHCP / IPAM)
- 24/7 on-call, P1/P2 major incident response, CAB under ITIL change management in ServiceNow

Eingesetzte Qualifikationen

Cyber Security Engineer, Check Point (allg.), Juniper, Netzwerk-Sicherheit, Security Operations Center (SOC), Network Architect

Network Security Architect (Festanstellung)
Quartz Matrix (Cisco, Meraki & Fortinet partner), Bucharest
5/2019 – 4/2022 (3 Jahre)
IT & Entwicklung
Tätigkeitszeitraum

5/2019 – 4/2022

Tätigkeitsbeschreibung

Greenfield network and security architectures for government, education and enterprise clients (incl. Delphi, Continental), manufacturing, energy and utilities.

- Full lifecycle: requirements, site surveys, HLD / LLD, BoM, implementation, cutover, acceptance testing, handover
- Cisco Catalyst, ISR / ASR, ASA and Firepower FTD, wireless; BGP, OSPF, EIGRP, VLAN, STP, QoS
- Cisco Meraki full stack; Fortinet FortiGate with FortiManager, FortiSwitch, FortiAP
- Security policy, NAT, IPsec and SSL-VPN across Palo Alto, Cisco, Meraki, Check Point and Fortinet
- Reduced SIEM false positives by 60% through Palo Alto ACC, Expedition and Cortex Data Lake tuning
- Pre-sales engineering, proposals, public tender documentation, PoC builds

Eingesetzte Qualifikationen

Fortigate Firewalls, Netzwerk-Sicherheit, Cisco-Netzwerkspezialist, Network Architect, Netzwerkingenieur

Senior IT Service Desk Engineer - Network Support (Festanstellung)
Ladbrokes Coral, London
6/2015 – 12/2017 (2 Jahre, 7 Monate)
Tourismus und Freizeitwirtschaft
Tätigkeitszeitraum

6/2015 – 12/2017

Tätigkeitsbeschreibung

2nd line Layer 2/3 support for Cisco routers, switches and Meraki access points across 1,000+ UK and Ireland locations; configuration templates and scripts for 1,000+ Cisco devices; major incident and security incident handling under ITIL.

Eingesetzte Qualifikationen

Support Engineer Netzwerke, Netzwerkadministrator

Weitere Projekt‐ & Berufserfahrung anzeigen

Ausbildung

Cyber Security and Network Engineering
Bachelor of Engineering
"Vasile Alecsandri" University of Bacău
2021
Bacău

Über mich

found in profile description
Senior Cyber Security and Network Engineer with 10+ years of experience designing, deploying and operating enterprise security architectures across on-premises data centers, Microsoft Azure and AWS.

Currently primary security engineer on five global enterprise accounts in Aerospace & Defense Manufacturing, Big Pharma, Rail & Transport, Healthcare and Public Sector, protecting estates of up to 100,000+ devices, with 24/7 on-call incident response and SOC monitoring.

WHAT I DELIVER
- Next-generation firewalls: Palo Alto PA-Series / VM-Series with Panorama, Check Point R8x (Multi-Domain Management, ClusterXL, Gaia), Cisco FMC / FTD / ASA, Fortinet FortiGate and FortiManager - policy design, NAT, SSL decryption, IPS tuning, upgrades, HA and migrations
- Zero Trust & SASE: Cloudflare Zero Trust (Access, Tunnel, WARP, Gateway), Zscaler ZIA / ZPA, IPsec and SSL-VPN design
- Network Access Control & segmentation: Forescout eyeSight / eyeControl / eyeSegment, 802.1X and RADIUS, device classification and posture, isolation of clinical, medical (IoMT) and operational device networks
- Network architecture: greenfield HLD / LLD, BGP, OSPF, EIGRP, VLAN segmentation, QoS, SD-WAN (Juniper SSR & Mist, Cisco Meraki), Infoblox DDI
- Detection & response: Splunk, Elastic Security, Cortex XDR, CrowdStrike Falcon - correlation rules, alert triage, threat hunting, root cause analysis
- Data & application protection: Forcepoint DLP, Symantec DLP, CyberArk PAM, Imperva WAF, F5 BIG-IP, Akamai and Cloudflare WAF / DDoS, Rapid7 InsightVM
- Compliance & process: ISO 27001, NIST CSF, GDPR, NIS2, ITIL v4, CAB / ECAB change management in ServiceNow

CERTIFICATIONS
PCNSE (Palo Alto Networks Certified Network Security Engineer) - CCNP Enterprise - CCNA R&S - Cisco Meraki CMNA - Fortinet NSE 1-3 - ITIL Foundation

WORKING MODEL
- B2B contract through my own registered company (EU VAT number, reverse charge invoicing)
- Remote-first; onsite at the client in blocks of about a week whenever the project needs it
- EU citizen, no work permit required
- Available immediately

Weitere Kenntnisse

Palo Alto Networks, Panorama, Check Point, Cisco Firepower, Fortinet, Juniper, Zscaler, Cloudflare, Forescout, Splunk, Elastic, CrowdStrike, Cortex XDR, CyberArk, Forcepoint, Imperva, F5, Infoblox, Rapid7, Azure, AWS, ServiceNow

Persönliche Daten

Sprache
  • Englisch (Muttersprache)
  • Rumänisch (Muttersprache)
Reisebereitschaft
Europa
Arbeitserlaubnis
  • Europäische Union
Home-Office
bevorzugt
Profilaufrufe
7
Berufserfahrung
11 Jahre und 4 Monate (seit 06/2015)

Kontaktdaten

Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.

Jetzt Mitglied werden