Network Security Engineer

Office based in our Sophia Antipolis (Valbonne, France) office 4 days per week or Kelsterbach (Frankfurt- Germany)Senior Network Security EngineerAbout the RoleWe're seeking an experienced network security engineer to build, operate, and scale our SASE architecture, encompassing both logical and physical infrastructure managed through Infrastructure as Code leveraging both Fortinet products and Linux (OpenStack) systems. You'll work across network architecture, security operations, and automation-designing solutions, driving incident resolution, and implementing systemic improvements to prevent recurrence.This role includes participation in a 24x7 NOC on-call rotation and requires some staffed weekend coverage.What You'll DoMaintain network architectures across datacenter environments (logical & physical)Build and optimize network monitoring and observability systemsDevelop automation to detect, mitigate, and remediate network events and solve problemsPerform root cause analysis and drive issues to resolutionMaintain documentation and operational consistency across the infrastructureContribute to technical discussions and long-range capacity planningProvide support to internal teams as a top-tier escalation point for all production issuesWhat You BringNetworking (8+ years)Expert-level hands-on experience with L2 switching, IP routing, and protocols (BGP, OSPF, MPLS, VRRP, STP, GRE, IPsec, SNMP)Large-scale BGP experience: public ASNs, peering, route arbitration, IRRsNetwork Security (8+ years)Access control, threat management (vulnerabilities, malware, APTs, botnets)SSL inspection, content categorization, security/risk frameworksFortinet product experience strongly preferredLinux & Infrastructure (5+ years)Administration of RHEL/CentOS, UbuntuWeb servers, SQL databases, LDAP, etc.OpenStack experience a plus (RHOSP/RHOSO preferred)GeneralStrong troubleshooting instincts and documentation habitsComfortable working independently in a ticket queue environmentClear communicator who can context-switch between deep technical work and stakeholder updatesNice to HaveCloud experience (AWS, GCP, Azure)Infrastructure-as-code tools (Terraform, Ansible)Load balancing and DDoS mitigation at scaleCertifications: NSE7/8, CCIE R&S, RHCSA/RHCEFluency in English essential + business level of local language highly desirable Must be prepared to work 1 weekend day and oncall infrequently#LI-NC1Full timePosting Date: 2026-04-17