Information Technology Engineer

About the Company

Avacon Netz GmbH is part of the

E.ON Group and plays an important role in Germany's energy infrastructure. The company is focused on maintaining secure, reliable, and future-ready energy networks while protecting critical infrastructure (KRITIS) systems.

The role is part of a newly established, motivated OT Security / Firewall team at the Laatzen location. The team is responsible for secure firewall operations, network protection, compliance, and the continuous improvement of security processes supporting critical infrastructure.

Avacon Netz GmbH is looking for an experienced IT Security Engineer / Firewall Administrator (m/w/d) specializing in OT Security, Network Security, Firewall Administration, Troubleshooting, and Analysis.

You will take responsibility for the secure and reliable operation of firewall systems supporting critical infrastructure environments. As a technical expert, you will evaluate and implement firewall rule changes, manage system life cycles, troubleshoot connectivity issues, and optimize firewall policies.

As a founding member of the new firewall team, you will also have the opportunity to help establish processes, standards, documentation, and audit-ready structures from the ground up.

• Independently review, assess, and implement firewall rule changes and security policies.
• Manage the stable operation, monitoring, maintenance, updates, and lifecycle of firewall systems.
• Develop and establish firewall administration processes, standards, and operational procedures.
• Implement security requirements at external interfaces within Germany-wide cooperation environments.
• Act as the primary technical contact for firewall troubleshooting and connectivity analysis.
• Analyze firewall rules and network configurations to identify root causes of technical incidents.
• Collaborate with operations, architecture, and support teams to resolve complex network and security issues.
• Maintain transparent, accurate, and audit-ready firewall documentation.
• Ensure compliance with KRITIS, BSI IT-Grundschutz, ISO 27001, and other applicable security requirements.
• Standardize and optimize firewall policies to improve security and simplify administration.
• Support colleagues from operations, planning, and architecture with technical firewall expertise.
• Assist users with correct change-request submissions and security processes.
• Support the operation and monitoring of OT IP networks.
• Analyze network performance and connectivity in real time.
• Participate in incident management, root-cause analysis, workaround management, and known-error processes.
• Work closely with 1st- and 3rd-level support and interdisciplinary technical teams.

• 37-hour working week.
• 30 days of annual vacation plus additional days off on Christmas Eve and New Year's Eve.
• Flexible working hours and hybrid work.
• Workation opportunities.
• Attractive collective-agreement compensation with 13 monthly salaries and bonus opportunities.
• Company pension scheme and capital-forming benefits.
• Corporate Benefits discounts.
• Hanse Fit and company sports programs.
• Employee stock program.
• Car and bicycle leasing.
• Extensive professional and personal development opportunities.
• Sabbatical opportunities.
• Paid family-start time for fathers and equivalent parents.
• Comprehensive family support services.
• Strong career development opportunities within the
  
  E.ON Group and the energy technology sector.

• Several years of professional experience in firewall administration and network security.
• Practical experience with Next-Generation Firewalls (NGFW) and centralized firewall management systems.
• Strong knowledge of:
  • TCP/IP
  • Dynamic routing
  • VPN
  • NAT
• Degree in Computer Science, IT Security, or a comparable technical qualification.
• Very good German language skills at C1 level or higher.
• Good written and spoken English skills.
• Strong communication skills with the ability to explain technical matters clearly to different audiences.
• Willingness to undergo the required security screening under SÜG/SÜFV due to the KRITIS environment.

• Certifications such as CCNP Security or CISSP.
• Demonstrated expertise in IT…