Midrand: Network Security Specialist posted by Gijima Holdings: HR

• Grade 12
• Information Technology or related field required

 EXPERIENCE:

• +5 years’ technical experience in deployment of NGFW platforms (Palo Alto, Fortinet, Checkpoint)
• + 5 years’ experience in Technical Information Security positions
• Alignment and experience with good practices essential (NIST, ISO27001 or equivalent)
• Practical experience in development of policy and standards
• Network-based security experience is essential
• Strong understanding of Zero Trust frameworks (NIST 800-207, ZTNA)
• Solid networking fundamentals — BGP, OSPF, VXLan, SD-WAN, TLS inspection
• Deception technology or honeypot deployment experience
• Standards-based architecture with an understanding of how to implement, including compliance monitoring and enforceability

TECHNICAL / LEGAL CERTIFICATION:

• Security Certifications in either Tufin, Firemon, Skybox, Algosec (optional)
• ITIL foundation certificate (optional)
• Fortinet NSE 7 certification (mandatory)
• Fortinet NSE 6 WAF & Forti Authenticator (mandatory)
• Checkpoint Firewall/Palo Alto Firewall Certification (mandatory)
• Mimecast or equivalent certification (optional)

RESPONSIBILITIES:

• Design and maintain Zero Trust network architecture across hybrid and multi-cloud environments
• Configure, tune, and deeply troubleshoot NGFW platforms (Palo Alto, Fortinet, Check Point, or equivalent)
• Manage and optimise WAF rulesets, signatures, and custom policies to protect web-facing assets
• Operate and tune IPS sensors — analyse alerts, reduce false positives, and lead incident response
• Deploy and maintain NDR solutions (e.g. Darktrace, LinkShadow or similar) for east-west traffic visibility
• Drive micro-segmentation, identity-aware access, and least-privilege network policies
• Assist analysts with configuration analysis reports and remediation actions
• Create and maintain configuration baselines for all network platform systems
• Develop and implement information network and security plans and policies
• Develop strategies to respond to and recover from a security breach
• Develop or implement tools to assist in detection, prevention, and analysis of security threats
• Investigate security breaches. Lead incident response, including steps to minimize the impact and then conducting a technical investigation into how the breach happened and the extent of the damage

JOB REQUIREMENTS:
KNOWLEDGE:

• Knowledge of network configuration auditing tools (e.g. Tufin, Firemon, Skybox, Algosec)
• Knowledge of CIS and other standards (e.g NIST) for network equipment
• 6+ years in network security engineering roles
• Knowledge of Wireless configuration best practices
• Hands-on mastery of at least one enterprise NGFW platform at depth (not just policy changes)
• Email Gateway Security experience eg. Mimecast or equivalent
• SASE experience eg. Zscaler or equivalent

SKILLS:

• Advanced communication skills (report writing, email and presentation)
• Advanced Problem-solving skills
• Advanced Customer orientation
• Functional coaching skills
• Proven WAF experience — OWASP Top 10, custom rule development, bot management

KEY COMPENTENCIES:
Essential

• Adhering to Principles and Values
• Delivering Results and Meeting Customer Expectations
• Deciding and Initiating Action
• Planning and Organising
• Self-driven
• A Evaluate and onboard new security tooling — presenting business cases and ROI to leadership
• Writing and Reporting

Desirable

• Exposure to OT/ICS network security
• Scripting ability for automation (Python, Ansible, or Terraform)
• Coping with Pressures and Setbacks
• Experience in cloud environments (AWS/Azure/GCP security constructs)
• Achieving Personal Work Goals and Objectives
• Following Instructions and Procedures
• Learning and Researching