Cybersecurity Network Specialist

Role overview

We are looking for a Cybersecurity Network Security Specialist to join one of our public sector clients based in Warsaw. You'll be hands-on in protecting and maintaining the network security infrastructure of a large enterprise environment.

Requirements

• English B2 level certification or higher - this is the must have for the role

The ideal candidate will be responsible for:

• Administering, monitoring and troubleshooting network security solutions.

• Providing 2nd line support to system and network users.

• Creating and maintaining technical documentation and operating procedures.

• Identifying and advising on network security improvements, changes and upgrades.

To excel in this role, you'll need:

• At least 5 years of experience in a similar network security role.

• Education at Level 4 or above.

• Strong understanding of TCP/IP, IP routing and network security policies.

• Good knowledge of network services (DNS, DHCP, NTP) and endpoint OS network configuration (Windows, Linux, iOS).

• Solid grasp of wired/wireless access technologies (Wi-Fi, 802.1x/EAP) and application-layer security (HTTPS/TLS, PKI, X.509).

• Hands-on experience with enterprise network hardware (Cisco routers/switches, wireless controllers, firewalls).

• Experience with stateful and stateless traffic filtering in large enterprise environments.

• Strong troubleshooting, analytical and communication skills — both technical and non-technical.

• Ability to work under pressure with minimal supervision, with a proactive and team-oriented mindset.

• Valid category B driving licence and willingness to travel within Europe occasionally (up to 10 trips/year).

• Required certification: CCNP Security or equivalent (e.g. Palo Alto Networks certifications).

Nice to have:

• CCSP (Certified Cloud Security Professional) or equivalent.

• AZ-305: Designing Microsoft Azure Infrastructure Solutions or equivalent.

• Hands-on experience with Palo Alto (Panorama, GlobalProtect, forward-proxy), Cisco switching, advanced firewall troubleshooting, and VPN design at scale.

• Azure cloud networking: hub-and-spoke/landing zone design, NSGs/ASGs, Private Link, hybrid connectivity (VPN/ExpressRoute).

• SASE/SSE experience: ZTNA, TLS inspection, identity integration, and migration from legacy on-prem proxy/VPN setups.

• Zero Trust networking: identity and device posture-based policy, microsegmentation, east-west/north-south traffic control.

• WAF and load balancing experience (F5, Cloudflare, Citrix, or similar).

This is a long term B2B contract, hybrid from Warsaw.