Ingénieur réseau et sécurité

Lausanne-based company seeks a motivated Network and Security Engineer to design, deploy, and secure their network infrastructure. The role involves evolving network architectures, managing critical incidents, and implementing processes to ensure service availability, performance, and confidentiality. The main day-to-day responsibilities include designing, deploying, and managing network infrastructures such as LAN, WAN, SD-WAN, and VLAN. The engineer will also supervise, monitor, and optimize network performance, implement and maintain security devices like firewalls, IPS/IDS, VPN, and NAC, and handle level 2 and 3 network incidents. Additionally, the role involves defining and applying security policies, conducting audits and intrusion tests, automating network tasks, and staying updated on technological and regulatory changes. The must-have requirements include a strong command of network protocols and technologies such as TCP/IP, BGP, OSPF, MPLS, VLAN, and QoS. Experience with major vendor equipment like Cisco, Juniper, Fortinet, and Palo Alto is essential, as is knowledge of security solutions like firewalls, VPN, IDS/IPS, proxies, and web filtering. Familiarity with network virtualization and cloud networking (SDN, VPC, Azure/AWS/GCP networking) and tools for supervision and observability (Nagios, Zabbix, Prometheus, Grafana) is also required. Scripting skills for automation (Python, Bash, Ansible, Terraform) and knowledge of cybersecurity standards (ISO27001, RGPD, vulnerability management) are crucial. Nice-to-have skills include certifications in network and security such as CCNA/CCNP, Fortinet NSE, Palo Alto, CISSP, and OSCP. The role is based in Lausanne, offering a collaborative environment with a team that includes infrastructure, security, and DevOps experts. Was die Stelle verlangt: - Diplôme supérieur en informatique, réseau ou sécurité (école d'ingénieur, Master, équivalent). - Expérience significative sur un poste similaire en entreprise ou en SSII/ESN. - Excellente maîtrise des protocoles et technologies réseau : TCP/IP, BGP, OSPF, MPLS, VLAN, QoS. - Expérience avérée sur équipements de fournisseurs majeurs (Cisco, Juniper, Fortinet, Palo Alto, etc.). - Bonne connaissance des solutions de sécurité : firewalling, VPN (IPsec, SSL), IDS/IPS, proxys, filtrage web. - Compétences en virtualisation réseau et Cloud Networking (SDN, VPC, Azure/AWS/GCP networking). - Pratique des outils de supervision et d'observabilité (Nagios, Zabbix, Prometheus, Grafana). - Scripting pour l'automatisation (Python, Bash, Ansible, Terraform) et gestion de configurations. - Connaissance des standards et bonnes pratiques de cybersécurité (ISO27001, RGPD, gestion des vulnérabilités). - Anglais technique exigé.