11/09/2026 updated
100 % available
Network Security Engineer - Global IT, Security Engineer, Network Engineer
Bucharest, Romania
Romania
BsC Computer ScienceVirtual Private Networks (VPN)Network SecurityNetwork Planning and DesignNetwork Installation ServicesNetwork MonitoringNetwork AdministrationAnsibleVulnerability ManagementNetwork RoutersNetwork Access ControlFirewalls (Computer Science)Network SupportPalo Alto NetworksCheck Point FirewallsFortinet
- Cybersecurity Solutions Delivery: Supported global planning, delivery, and 3rd-level support of Extranet firewall clusters, routers, and switches — enabling secure partner and supplier access to critical systems across Americas, EMEA, and APAC.
– Network Security Architecture: Supported operations across Cisco ASA/FTD/FMC, Check Point R70–R80, Palo Alto NGFW/Panorama/Prisma Access, Fortinet FortiGate, Juniper SRX, F5 BIG-IP, and ZScaler — spanning NGFWs, WAF, IPSec/SSL VPN, routing, and switching in complex production environments.
– Vulnerability Management & System Hardening: Delivered prioritised remediation roadmaps and conducted regular vulnerability assessments, capacity reviews, and system hardening activities; managed full device lifecycle including firmware upgrades, patching, and end-of-lease refreshes.
– SIEM, IDS/IPS & Security Monitoring: Deployed and tuned IDS/IPS, NGFW, and SIEM platforms; performed Splunk log analysis, security event investigation, and anomaly correlation for managed-services clients and enterprise environments.
– Security Policy & Compliance Enforcement: Enforced cybersecurity policies and best practices through rule-base auditing, change control, peer review, and compliance alignment across enterprise and regulated environments.
– Automation & Scripting: Utilised Ansible for policy automation and infrastructure management; experienced with Palo Alto Panorama API and Check Point SmartConsole/SmartEvent for automated security operations.
Experience
Professional experience10+ years
Freelancer since2020
Languages
EnglishFluentRomanianNative speaker
Project history
Member of the team responsible for Planning and Delivery of Extranet solutions for
partners/suppliers to access Ford resources, that meet the needs in a cost effective
and timely manner while maintaining Ford's Security Policy. The group is responsible
for the Americas, Europe, Middle East and Africa and the Asia Pacific Regions.
Responsibilities:
-Design, installation, configuration and deployment of Extranet solutions globally
-Partnering with technical peers to create robust network solutions
-Refreshing end of lease and end of support Extranet Devices
-Upgrading code on Extranet Firewall, Routers and Switches
-Decommission no longer used hardware
-Peer Review of Change Controls
-3rd level technical support to the Extranet Operations team
-Extranet Consulting services for customers seeking assistance for Extranet
solutions
-Review build diagrams for deployed apps projects
-Conducted detailed assessments of the Security Infrastructure to prioritize
program remediation or improvement for various business segments.
-Installed and configured security solutions for intrusion detection or intrusion
prevention, firewalls, SIEM, and MDM.
-Ensured network security best practices are executed through auditing: change
control, firewall configurations, and monitoring.
-Coordinated and overseen log analysis for company managed services offerings
to ensure customer policy and security requirements are met.
-Troubleshooted and resolved firewall issues in production environments in a
secure manner and interfacing with internal clients, teams and collaborating with
diverse departments with different needs, addressing issues from basic systems management to troubleshooting and solving issues with related hardware and software components
-Performed ongoing network fine tuning, upgrades and enhances to optimize
network performance, availability, stability and security