Network Security Engineer

Role: Network Security Engineer — Next-Generation Firewall (NGFW)

Location: (Remote) Belgium

Employment Type: Permanent

Job Description:

Role Summary

We are seeking a highly skilled, customer-centric Senior Customer Success Engineer (CSE) specializing in enterprise Next-Generation Firewall (NGFW) environments. In this role, you will act as the principal technical advisor and hands-on deployment specialist ensuring our enterprise customers maximize the value, adoption, and security posture of their entire NGFW infrastructure.

You will bridge the gap between strategic business objectives and deep technical execution across multiple architectural environments—including the Internet Edge, Data Center, and Branch/Campus networks. The ideal candidate possesses deep network infrastructure skills, expertise in cloud/data security add-ons, and the ability to guide customers through platform migrations and advanced threat vectors.

Required Technical Skills & Qualifications

• Experience: 5+ years of experience in network security engineering, security architecture, or deployment-focused customer success roles within enterprise environments. Must include a minimum of 2–3 years of direct, hands-on experience in deployment and troubleshooting live production environments for enterprise firewall customers.
• Firewall & Management Expertise: Deep technical mastery of NGFW architectures, various form factors, PAN-OS features and functionalities including deep understanding of Panorama and Strata Cloud Manager (SCM).
• Network & PKI Fundamentals: Extensive hands-on experience with IPsec VPNs, Quality of Service (QoS) traffic prioritization, dynamic routing protocols (BGP/OSPF), Zero Touch Provisioning (ZTP) workflows, and Public Key Infrastructure (PKI) certificate validation.
• Identity & Access Management (IAM): Experience in configuring SAML/RADIUS/LDAP integrations, and endpoint compliance (GlobalProtect/Host Information Profiles (HIP)).
• Data & Cloud Security Platforms: Familiarity with deploying and configuring Cloud Access Security Brokers (CASB), Enterprise DLP engines, and IoT Security platforms.