IT Network & Security Engineer (Global position)

Náplň práce, právomoci a zodpovednosti:
NETWORK & SECURITY INFRASTRUCTURE MANAGEMENT
- Design, implement, and maintain secure WAN, LAN, and wireless networks across multiple sites.
- Configure and manage perimeter security systems, including firewalls, VPN gateways, and DMZ environments.
- Ensure reliable operation and performance of routing, switching, and network segmentation (VLAN, VTP).
- Manage secure remote access solutions and site-to-site connectivity with external partners.
- Maintain accurate documentation of network and security configurations, diagrams and standards.

SECURITY OPERATIONS & COMPLIANCE
- Implement and enforce corporate network security policies in line with ISMS and CISO directives.
- Monitor firewalls, IDS/IPS, and access logs to detect anomalies or security breaches.
- Support vulnerability assessments and penetration tests, ensuring timely remediation of findings.
- Provide technical evidence and documentation for compliance audits (ISO 27001, TISAX).
- Work closely with the Information Security Officer to maintain secure configurations and risk mitigation plans.

MONITORING, TROUBLESHOOTING and OPTIMIZATION
- Continuously monitor network performance, availability, and security posture using approved tools.
- Analyze and resolve complex network and security incidents as Level 3 support.
- Optimize bandwidth, latency, and throughput while maintaining security compliance.
- Perform root-cause analysis of network outages and recommend long-term corrective actions.
- Coordinate incident escalation with vendors and service providers to ensure rapid resolution.

CONTINOUS IMPROVEMENT & PROJECT DELIVERY
- Lead or support infrastructure projects involving network expansion, redesign, or technology upgrades.
- Evaluate and recommend new network and security technologies to improve resilience and efficiency.
- Contribute to business continuity and disaster recovery planning from a network and security perspective.
- Provide technical guidance and mentoring to junior engineers and IT support teams.
- Follow established change and release management processes for all network and security modifications.

Zamestnanecké výhody, benefity:
Flexible and fixed working hours
4 extra sick days
Possibility of working from home
Salary indexing: annual performance-based pay raises
Year-end bonuses based on company financial results
Edenred Card
MultiSport Card
Employer contribution to the supplementary pension plan (III. pillar)
Language education allowance
On-site canteen / Dining facilities
Health Day, corporate blood donation, Christmas party, and other events
Teambuilding activities
Training and development opportunities
Childbirth grant
Wedding grant
Life jubilee bonus
Retirement contribution
High-standard working conditions and clean environment
Opportunity to submit personal improvement ideas

Požiadavky na zamestnanca:
Network & Perimeter Security (Firewalls, DMZ, VPN, NAC)
WAN/LAN Architecture and Configuration (CISCO & FortiNet)
Security Monitoring and Incident Response
Routing and Switching (Cisco, Fortinet, etc.)
Vulnerability Assessment and Remediation
Network Performance Optimization
Disaster Recovery and Business Continuity Planning
Problem solving
Team work
Communication skills