System Engineer Network Security (m/w/d)

Responsibilities

• Responsible for network security in the campus area
• Definition and maintenance of network design standards, segmentation strategies, and access control policies
• Integration of network and security architectures to support zero-trust principles and secure access
• Installation, configuration, and maintenance of switches, routers, wireless controllers, and access points (Cisco, Aruba, or equivalent)
• Implementation of 802.1X, NAC, and VLAN-based segmentation to ensure the security of endpoint and user access
• Management and optimization of network performance, reliability, and capacity planning
• Troubleshooting and root cause analysis for complex network or connectivity issues
• Management and maintenance of Check Point firewalls, including policy design, rule optimization, and VPN configuration
• Management of web proxy and secure web gateway solutions
• Implementation of IPS/IDS, URL filtering, and application control policies
• Collaboration with SOC and security departments to monitor and respond to security incidents
• Regular security assessments, patching, and compliance checks for the network infrastructure
• Support for the introduction of secure remote access and network segmentation initiatives
• Design, further development, and operation of automation solutions with a focus on switching and firewall infrastructures

Requirements

Must have:

• Successfully completed studies in Computer Science, Information Technology, or a comparable field
• Several years of professional experience in LAN/WLAN design and network security in companies
• Proven expertise with Cisco Catalyst, Meraki, or Aruba network infrastructures
• Profound knowledge in routing and switching (OSPF, BGP, STP, VLANs, QoS)
• Practical experience with Check Point firewalls, including SmartConsole, VPNs, and Threat Prevention
• Experience in managing Web Proxy and Secure Web Gateway solutions (e.g., Blue Coat, Zscaler, or Cisco Umbrella)
• Familiarity with NAC (Cisco ISE), 802.1X authentication, and RADIUS/TACACS+
• Understanding of IDS/IPS, VPN, SSL/TLS, and access control concepts
• Knowledge in SIEM integration, protocol analysis, and network monitoring platforms
• Relevant certifications such as CCNP Enterprise, CCNP Security, Check Point CCSA/CCSE, or Aruba Certified Professional are advantageous
• Very good German and English skills, both written and spoken
• Strong analytical skills, problem-solving competence, high degree of personal responsibility, and conscientiousness regarding security and availability

Company

We are the publicly listed Rheinmetall AG, headquartered in Düsseldorf, an integrated technology group and a leading international systems supplier for the defense industry. We offer attractive remuneration, flexible working time models, and mobile working, as well as a variety of benefits including company pension plans and individual development opportunities. The workplace can be at the locations Berlin, Düsseldorf, Kassel, Kiel, and Unterlüß, or 100% remote.

Benefits

• Pension Plan
• Flexible working time models
• Mobile working
• Individual development opportunities