Network Security Lead

About the role

We are looking for a Network Security Lead to join our team in Cork on a permanent, hybrid basis. You will own the design, implementation and operation of next‑gen firewall platforms and ensure the security of our hybrid cloud and on‑premise networks.

Key responsibilities

• Design, build and run Palo Alto and/or Check Point firewalls, including Panorama, App‑ID, User‑ID, URL/Threat profiles and decryption.
• Manage routing, NAT, VPN, HA clustering, BGP/ECMP, DNS and PKI across Azure and hybrid topologies.
• Integrate firewall logs with Microsoft Sentinel, create high‑fidelity alerts and develop runbooks/SOAR playbooks.
• Mentor junior analysts, conduct design reviews and enforce quality gates.
• Lead penetration testing and red‑team exercises targeting network controls, track findings and ensure remediation.
• Participate in audits, provide evidence of control design and effectiveness.
• Maintain backup, patching and firmware update processes for all security appliances.
• Run vulnerability scans (Qualys TVM), remediate findings and report to asset owners.
• Monitor device health, capacity and performance, and proactively address issues.

Required profile

• Degree in Information Systems/IT or equivalent experience.
• 5+ years of IT experience with at least 3 years in network security or firewall engineering.
• Strong communication skills to explain complex security topics to technical and non‑technical stakeholders.
• Eligibility to work full‑time in Ireland.

Required skills

• Palo Alto Networks (PAN‑OS, Panorama, App‑ID, User‑ID, decryption).
• Check Point (R8x, SmartConsole/Smart‑1, IPS, Identity Awareness).
• Routing/NAT/VPN, HA clustering, BGP, ECMP, DNS, certificates/PKI.
• Azure cloud networking, Azure Firewall, NSGs/ASGs.
• SIEM integration – Microsoft Sentinel.
• Packet capture and analysis tools (Wireshark/PCAP).
• Automation/IaC – API, Ansible, Terraform.
• Policy hygiene tooling – Expedition.
• Vulnerability scanning – Qualys TVM.