Senior Security Engineer; NGFW, PAM & Endpoint Security

Help AG is looking for an experience Senior Security Engineer (NGFW, PAM & Endpoint Security) who will design, implement, and manage centralized Palo Alto and Fortinet firewall architectures, endpoint security solutions, and security operations. The ideal candidate will have hands‑on experience with McAfee Endpoint Security, Cyber Ark PAM solutions, and a solid understanding of security concepts and best practices in alignment with corporate governance and compliance standards.

• Design and deploy a centralized firewall management platform for both physical and virtual firewalls, including Palo Alto and Fortinet firewalls.
• Integrate with enterprise network topology across data centres, cloud environments, and remote sites.
• Implement high‑availability clusters, redundancy, and disaster recovery configurations to ensure business continuity and operational resilience.
• Migrate and consolidate firewall rules into a unified policy framework, including for Palo Alto and Fortinet platforms.
• Develop standardized security policies in compliance with corporate governance and regulatory requirements (e.g., ISO 27001, NIST).
• Implement role‑based access control (RBAC) for secure, auditable policy administration across multiple firewall platforms.
• Enable automated workflows for firewall rule provisioning, approvals, and decommissioning across Palo Alto and Fortinet firewalls.
• Integrate with ITSM platforms (e.g., Service Now) for seamless change management, ensuring compliance and consistency.
• Conduct scheduled compliance audits and automated policy validation to reduce human error and prevent security violations.
• Manage centralized log aggregation for Palo Alto, Fortinet, and other firewall instances.
• Integrate firewall logs with SIEM platforms for real‑time threat detection and event correlation.
• Develop and deploy dashboards for operational visibility, performance metrics, and compliance reporting.
• Ensure enforcement of corporate security standards and regulatory mandates (e.g., ISO 27001, NIST, local regulations).
• Oversee vulnerability assessments, patch management, and configuration hardening for Palo Alto, Fortinet, and other security infrastructure.
• Maintain comprehensive documentation and audit trails for risk management and governance purposes.
• Support security operations by managing tickets related to firewall incidents, configurations, and requests.
• Act as an architect to review and approve ticket resolutions, ensuring compliance with security policies and best practices for Palo Alto and Fortinet firewalls.
• Administer McAfee Endpoint Security across the enterprise, ensuring consistent deployment and compliance with organizational security standards.
• Conduct regular audits to ensure endpoints are secured and compliant.
• Implement and manage Cyber Ark PAM solutions for securing and controlling access to critical systems and applications.

• Bachelor’s Degree in Computer Science, Information Security, or a related field.
• Minimum 5‑7 years of experience in information security, firewall management, and security operations, with hands‑on experience in managing Palo Alto and Fortinet firewalls.
• Hands‑on experience in deploying and managing Palo Alto, Fortinet, and other firewall solutions, including centralized management platforms and high‑availability configurations.
• In‑depth knowledge of McAfee Endpoint Security and its integration within an enterprise security framework.
• Familiarity with Cyber Ark PAM solutions for privileged access management.
• Strong understanding of regulatory mandates such as ISO 27001, NIST, and local compliance requirements.
• Experience in automating security processes, including firewall rule provisioning and change management.
• Proficiency in integrating firewalls (including Palo Alto and Fortinet) with SIEM platforms for threat detection and analysis.
• Ability to analyze security incidents and develop remediation strategies.
• Experience with Service Now or other ITSM platforms for managing security change requests and incidents.
• Certifications:
  
  CISSP, CISM, Palo Alto PCNSE, Fortinet NSE, or relevant firewall/security certifications.
• Familiarity with cloud platforms (AWS,…