TasksDesigning and implementing IP-based network solutions with a strong security postureDeveloping and enforcing network security standards and best practicesDesigning and maintaining network zones, segmentation strategies, and access control policiesManaging and configuring firewall systemsImplementing and operating proxy solutions to ensure secure and monitored web accessSupporting secure connectivity for SAP systems using SAP RouterDriving network automation initiatives to enhance operational efficiency and reduce manual interventionsReviewing, optimizing, and maintaining security rule sets and configurationsCollaborating with other IT/security teams and business units to ensure alignment of infrastructure with security and business requirementsQualificationsAt least 5 years of experience with IP-based network design and troubleshootingDeep understanding of network security principles, including segmentation, access control, and threat mitigationPractical knowledge of firewall technologies (e.g., Cisco ASA/FTD, Palo Alto, Fortinet, Check Point)Experience configuring and managing proxy systems (e.g., Zscaler, Blue Coat/Symantec, Squid)Familiarity with network zone concepts (e.g., DMZ, internal, external, restricted zones)Understanding and configuration experience with SAP Router for secure SAP communicationExperience in network automation tools and scripting - PythonAdvanced level of English and GermanAbility to lead technical discussions, make design decisions, and mentor junior staffNice-to-have:Experience with Tufin Secure Track/SecureChange for firewall and policy managementExposure to cloud networking and security (AWS, Azure, GCP)Things to know before departure: Start: by arrangement - always on the 1st and 15th of the monthWorking hours: full-time (40h); 27 vacation daysEmployment contract: UnlimitedLine of work: Consulting Language skills: Fluency in English & German Flexibility & willingness to travelOther: a valid work permit Show more Show less