Network Security Engineer

We're looking for a Network Security Engineer to join the Technology Division of a leading financial organization. This is an opportunity to join an experienced network team and work in a large-scale enterprise environment, supporting and maintaining critical network infrastructure across data centers, offices, and distributed sites.

What You'll Do:

• Operate, maintain, and monitor enterprise network infrastructure across data centers and organizational sites
• Manage and maintain Cisco-based network environments, including Nexus and Catalyst switches
• Work with routing and switching protocols such as BGP, OSPF, HSRP, VLAN, STP, vPC/LACP, and related technologies
• Troubleshoot complex network issues end-to-end and work with vendors and technology providers when needed
• Manage and support data center, internet, DMZ, and Wi-Fi network environments
• Implement and maintain network security controls, including Firewalls, segmentation, NAC, NAT, VPN, and Proxy
• Participate in infrastructure projects, network upgrades, equipment replacements, and data center initiatives
• Document network configurations, diagrams, and operational procedures

Requirements:

Must Have:

• 5+ years of hands-on networking experience within a large-scale enterprise environment
• Strong knowledge and hands-on experience with routing and switching technologies and network protocols
• Hands-on experience with Cisco Nexus and Catalyst
• Strong understanding of TCP/IP, VLAN, STP, vPC/LACP, OSPF, BGP, HSRP/VRRP, DHCP, DNS, NTP, QoS, and Multicast
• Understanding of network security technologies, including Firewalls, segmentation, NAT, VPN, and Proxy
• Strong troubleshooting and problem-solving skills
• Good communication skills in Hebrew and English
• Willingness to participate in on-call rotations and work during non-standard hours when required

Nice to Have:

• Hands-on experience with Cisco ACI
• Experience with Palo Alto Firewalls
• Experience with Cisco ISE
• Experience with monitoring tools such as SolarWinds or PRTG
• CCNA, CCNP, or relevant information security certifications