Job
- Level
- Senior
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Kochel am See
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you design security architectures, manage Sophos Firewall environments, and analyze security incidents to enhance network security on a daily basis. You actively work on the administration and advancement of VPN infrastructures.
Job Technologies
Your role in the team
- Planning, implementation, migration, and operation of Sophos Firewall environments - from initial configuration to ongoing managed service.
- Design and implementation of security architectures: firewall rules, NAT, IPS/IDS, web filtering, application control, and Zero Trust.
- Administration and further development of site-to-site and client VPN infrastructures (IPsec, SSL-VPN, ZTNA).
- Management of the entire Sophos portfolio: XGS Firewalls, Sophos Central, Endpoint, MDR/XDR.
- Analysis and handling of security incidents, evaluation of logs and alerts via Sophos Central and SIEM.
- Creation and maintenance of technical network and security concepts as well as customer documentation.
- Technical consulting for our medium-sized clients in the DACH region on security topics and recommended actions.
- Selection and evaluation of security products and further development of our Managed Security Services.
- Mentoring of the 1st and 2nd level teams.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Solid foundation in network technologies: TCP/IP, routing, switching, VLANs, QoS.
- Understanding of common security concepts: Defense-in-Depth, segmentation, Least Privilege, Logging & Monitoring.
- Ability to communicate security-related matters clearly to non-technical contacts at the customer.
- Very good German skills, good English skills (technical documentation).
- Sophos certifications (e.g., Sophos Certified Engineer, Sophos Certified Architect).
- Basic knowledge of scripting (PowerShell, Python) for automating security tasks.
- Familiarity with regulatory requirements relevant to SMEs: NIS2, TISAX, ISO 27001.
Experience
- Several years of practical experience in the administration of network and security infrastructures, ideally in an MSP or system integrator environment.
- Extensive hands-on experience with Sophos XGS Firewalls: rule sets, zones, SD-WAN, ZTNA, high availability, and Sophos Central Management.
- Experience with VPN technologies (IPsec, SSL-VPN) and modern access models (Zero Trust Network Access).
- Experience with HPE Aruba network products: switches, wireless solutions (Aruba Access Points, ArubaOS), ideally also with Aruba Central.
- Experience with additional security products and vendors.
- Experience with SIEM solutions or log management (e.g., Sophos XDR, Graylog, Elastic).
This text has been machine translated. Show original
What we offer
- Attractive salary commensurate with your experience and responsibilities.
- Challenging security projects with the opportunity to independently drive topics forward.
- Direct collaboration with management and short decision-making processes.
- Individual training and certifications.
- Flexible working hours and hybrid working.
- Company car or mobility allowance by arrangement.
- Open, down-to-earth corporate culture with genuine team spirit.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
niteflite networxx GmbH
Als professioneller Systemhaus-Partner für IT-Systeme verwirklichen wir abgestimmte Lösungen aus den Bereichen Netzwerke, IT-Services und Security. Wir beraten unsere Kunden in ihrer Netzwerkplanung und kümmern uns um ihre Netzwerkinstallation. Dazu zählen die Auswahl der richtigen Komponenten und die Implementierung der Systeme. Wir begleiten sie mit der Administration und übernehmen eine ständige Überwachung, damit ein reibungsloser Betrieb der angewendeten IT-Systeme gewährleistet ist.
Description
- Founding year
- 1998
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Senior Network Security Engineer
- Location
- Kochel am See
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
