Senior Network Security Engineer

About The Project

You will lead the end-to-end design, deployment, and handover of a Secure SD-WAN and Network Segmentation solution across a large multi-site environment in the Philippines. This includes 25 branch offices, two corporate sites, two data centers (with HA and DR), and a centralized management platform—ensuring robust connectivity, Zero Trust segmentation, and unified security enforcement.

Key Responsibilities

• Solution Design & Architecture:
• Translate business requirements into a scalable SD-WAN + NGFW design
• Define secure segmentation zones and security policies aligned with Zero Trust
• Implementation & Deployment:
• Lead on-site and remote deployment of SD-WAN/CPE devices at branch offices, corporate sites, and data centers
• Configure high-availability clusters, ZTP provisioning, dynamic path selection, and sub-second failover
• Security Integration:
• Enable application-layer inspection, SSL/TLS decryption, IPS, sandboxing, URL/DNS filtering, and IoT profiling
• Enforce consistent policies across all devices via central management
• Lifecycle & Licensing Management:
• Validate hardware meets 5-year support requirements and manage three-year licensing renewals
• Training & Knowledge Transfer:
• Develop and deliver comprehensive training for IT staff on operations, monitoring, and troubleshooting
• Support & Documentation:
• Author detailed runbooks, network diagrams, and handover documentation
• Provide 24×7 remote support escalation and coordinate 8×5 on-site support resources
• Vendor & Stakeholder Coordination:
• Liaise with hardware/software vendors to validate product qualifications (Gartner, Forrester leaders) and local references
• Interface with internal IT teams, management, and external auditors as needed
  

Required Qualifications

• Education & Certifications:
• Bachelor’s degree in Computer Science, Information Technology, or related field
• Experience:
• Minimum 7 years of hands-on experience in enterprise network security
• At least 3 full lifecycle SD-WAN deployments in multi-site environments
• Proven track record implementing network segmentation and Zero Trust architectures
• Technical Skills:
• Deep expertise in SD-WAN features: dynamic path selection, mesh & hub-and-spoke, ZTP, proactive monitoring
• Strong background in NGFW security services: IPS, antivirus, content inspection, sandboxing, URL/DNS security
• Familiarity with SSL/TLS decryption and performance tuning at high throughput (600 Mbps–4 Gbps)
• Experience deploying and managing centralized management platforms with analytics and health profiling
• Proficient in routing, switching, VPNs, and WAN optimization best practices
  

Good To Have

• Advanced-level certification for your chosen SD-WAN/NGFW vendor (e.g., Cisco CCNP Security, Palo Alto PCNSE, Fortinet NSE 4/6)
• Hands-on exposure to Cloud-Native Application Protection (CASB, CSPM, CWP, SASE, IaC scanning)
• Experience in financial services or other regulated industries
• Local presence or willingness to relocate to Visayas region, Philippines
• Strong vendor relationships and customer references within the Philippine market
  
  

Soft Skills

• Excellent communicator, able to articulate complex technical concepts to non-technical stakeholders
• Strong project management and documentation discipline
• Proactive problem-solver with a customer-centric mindset
• Ability to mentor junior engineers and lead knowledge-transfer sessions
  
  

Location: Based in Visayas (Cebu office) (with travel across the Philippines); occasional deployments to Metro Manila and Southern Luzon.

Employment Type: Full-time

Reports To: IT Infrastructure & Security Director