Cybersecurity Network Specialist

Role overviewWe are looking for a Cybersecurity Network Security Specialist to join one of our public sector clients based in Warsaw. You'll be hands-on in protecting and maintaining the network security infrastructure of a large enterprise environment.

Requirements

English B2 level certification or higher - this is the must have for the role

The ideal candidate will be responsible for:

Administering, monitoring and troubleshooting network security solutions.

Providing 2nd line support to system and network users.

Creating and maintaining technical documentation and operating procedures.

Identifying and advising on network security improvements, changes and upgrades.

To excel in this role, you'll need:

At least 5 years of experience in a similar network security role.

Education at Level 4 or above.

Strong understanding of TCP/IP, IP routing and network security policies.

Good knowledge of network services (DNS, DHCP, NTP) and endpoint OS network configuration (Windows, Linux, iOS).

Solid grasp of wired/wireless access technologies (Wi-Fi, 802.1x/EAP) and application-layer security (HTTPS/TLS, PKI, X.509).

Hands-on experience with enterprise network hardware (Cisco routers/switches, wireless controllers, firewalls).

Experience with stateful and stateless traffic filtering in large enterprise environments.

Strong troubleshooting, analytical and communication skills — both technical and non-technical.

Ability to work under pressure with minimal supervision, with a proactive and team-oriented mindset.

Valid category B driving licence and willingness to travel within Europe occasionally (up to 10 trips/year).

Required certification: CCNP Security or equivalent (e.g. Palo Alto Networks certifications).

Nice to have:

CCSP (Certified Cloud Security Professional) or equivalent.

AZ-305: Designing Microsoft Azure Infrastructure Solutions or equivalent.

Hands-on experience with Palo Alto (Panorama, Global

Protect, forward-proxy), Cisco switching, advanced firewall troubleshooting, and VPN design at scale.

Azure cloud networking: hub-and-spoke/landing zone design, NSGs/ASGs, Private Link, hybrid connectivity (VPN/Express

Route).

SASE/SSE experience: ZTNA, TLS inspection, identity integration, and migration from legacy on-prem proxy/VPN setups.

Zero Trust networking: identity and device posture-based policy, microsegmentation, east-west/north-south traffic control.

WAF and load balancing experience (F5, Cloudflare, Citrix, or similar).

This is a long term B2B contract, hybrid from Warsaw.