What are the responsibilities and job description for the Network Security DevOps Engineer position at Pantheon Inc?
Job Description
As a Network Security DevOps Engineer, you will play a critical role in designing, engineering, and managing the enterprise network security posture. You will ensure that the network infrastructure aligns with corporate security policies and standards, protecting against evolving cyber threats. This role involves operating and maintaining key security technologies—such as firewalls, IDS/IPS, and other advanced controls—while applying DevOps principles to drive automation, scalability, and resilience. You will collaborate closely with network, infrastructure, application, and cybersecurity teams to support and enhance global IT services.
Key Responsibilities
• Design, implement, and manage network security technologies and services across regions and different infrastructure environments (data centers, offices, edge).
• Research and recommend industry best practices and emerging technologies in network security.
• Operate and maintain network security appliances (Fortinet, Cisco, Juniper), including upgrades and patching.
• Build and manage network security infrastructure using DevOps practices and automation tools.
• Contribute to the Zero-Ops infrastructure management vision by developing solutions that reduce manual intervention and improve operational efficiency.
• Support security operations: monitoring, analysis, incident response, and vulnerability management.
• Evaluate security advisories and vulnerabilities, providing timely recommendations and mitigations.
• Participate in ad-hoc vulnerability assessments and incident response.
• Coordinate with stakeholders across Cybersecurity, Projects, and internal customers.
• Develop and maintain operational processes and documentation for ongoing support.
Qualifications
• Minimum 3 years of hands-on experience in network security.
• Experience with network security platforms: Cisco ASA (CSM), FTD (FMC), FortiGate (FortiManager), Juniper SRX (Junos Space).
• Strong understanding of networking fundamentals: TCP/IP, OSI model, routing/switching, ACLs.
• Familiarity with security technologies: firewalls, VPNs, IDS/IPS, encryption, authentication, vulnerability management, and incident response.
Technical Skills
• Deep knowledge of TCP/IP, Internet technologies, IPS/IDS, firewall virtualization, VPNs, NAT, DNS, etc.
• Relevant certifications (preferred but not required): Cisco (CCNA/CCNP Security), Fortinet (FCA/FCSS/NSE), CISSP, GIAC.
• Automation & DevOps
• Strong advantage: experience with GitHub, Terraform, Ansible, Python, REST API, Jenkins, Jinja2, YAML.
• Familiarity with CI/CD concepts and tools is a plus.
• Cloud
• Experience with AWS and Azure network security services.
• Soft Skills
• Excellent verbal and written communication in English.
• Mindset to grow and learn.
• Self-motivated, proactive, and able to work independently in a global virtual team.
• Strong multitasking and prioritization abilities.
• Analytical mindset and a collaborative team player.
• On-Call Rotation
• Participates in a global 'follow-the-sun' on-call support rotation.
Top 3 skill sets/technologies:
1) Network security firewall
2) Automation
3) Cloud (AWS & Azure connectivity)