Responsibilities

• Build, administer, and maintain internal company networks, covering both virtual environments and office infrastructure.
• Ensure secure and stable employee access to corporate resources globally using Palo Alto Networks architecture, SD-WAN, and Conditional Access policies.
• Prevent network configuration drift by automating infrastructure management with Ansible and Terraform, and collecting latency telemetry.
• Configure and maintain Next-Generation Firewalls (NGFW), Panorama, VPN Gateways, and GlobalProtect (including client provisioning and endpoint verification via HIP profiles).
• Manage security, NAT, and VPN policies, alongside role-based network segmentation, VPN zones, and transit routing.
• Administer Linux-based network environments and KVM/QEMU virtualization using virsh.
• Manage SSL/TLS, IPSec, and the full certificate lifecycle (PKI).
• Analyze VPN traffic flows, sessions, and logs, while maintaining DDoS mitigation, brute-force protection, and rate-limiting mechanisms.
• Maintain network configurations as code using Git workflows (branching, pull requests, and version control).
• Monitor network availability and latency, systematically troubleshooting connectivity and security issues.

Requirements

• 3+ years of experience in Network Engineering with hands-on exposure to Next-Generation Firewalls (e.g., Fortinet, Palo Alto Networks).
• Strong grasp of TCP/IP, routing, traffic filtering, and the differences between traditional stateful firewalls and NGFWs.
• Solid understanding of Pan-OS internals (XML configuration, commit pipeline, policy processing, logging) or readiness to quickly master them.
• Practical knowledge of network security mechanisms (DDoS/brute-force protection, rate limiting), VPNs (IPSec, SSL/TLS), and certificate management.
• Understanding of SD-WAN and Conditional Access principles for remote access.
• Hands-on experience administering Linux systems and KVM/QEMU virtualization, with mandatory proficiency in virsh.
• Practical experience with Ansible for network automation (experience with Terraform is a plus).
• Confident working knowledge of Git and at least basic Python skills for scripting.
• Systematic approach to troubleshooting, log/session analysis, and incident resolution.
• Professional proficiency in English.

Will be a plus

• 1+ year of focused, hands-on experience directly with the Palo Alto Networks stack (Pan-OS, Panorama, GlobalProtect).

We offer

• Compensation for tax expenses of private entrepreneurs in Ukraine
• Qualified assistance and support for Ukrainian private entrepreneurs
• 10 paid sick leave days per year
• 20 paid vacation days per year
• Public holidays according to current Ukrainian legislation
• Medical insurance for employees
• Compensation for professional education and learning English
• Compensation for a sports subscription or sports equipment