(Senior) Network Operations Engineer

Security is becoming increasingly important to industries. Utimaco products have been protecting people from organized crime and terror as well as sensitive data from theft and abuse for over 35 years. To this end, Utimaco has developed hardware security modules and compliance solutions for telecommunications providers in the field of regulation. Utimaco is the global market leader in both segments. Utimaco stands for recognized product quality, userbility, excellent support and a market-driven offer, manufactured in Germany.

The central goal of protecting people, data and ideas is the commitment of more than 200 people to Utimaco.

• Configure, operate, and maintain network infrastructure, including Juniper SRX firewalls, QFX/EX switches, Fortinet FortiGate firewalls, FortiSwitches, and OPNsense firewalls, as well as Microsoft Azure networking components.
• Implement and manage firewall policies, VPN connections (IPsec), and secure access methods following zero-trust and least-privilege principles.
• Monitor network health, traffic, and performance using tools such as Prometheus, Grafana Loki, and OpsGenie.
• Deploy and optimize network services such as Reverse Proxies (HAProxy, Traefik) and DNS configurations for high availability and resilience.
• Apply Infrastructure-as-Code principles using Ansible (and optionally Terraform) for repeatable, automated network deployments and configuration management.
• Troubleshoot and analyze network issues using Wireshark, nmap, and vendor-specific tools to ensure optimal performance and minimal downtime

• Solid hands-on expertise in operational network engineering — configuration, troubleshooting, and lifecycle management in enterprise/global data center environments.
• Proven experience with Juniper EX, QFX, and SRX platforms, Fortinet FortiGate firewalls, FortiSwitches, and OPNsense firewalls, plus Microsoft Azure networking.
• Strong understanding of network protocols (BGP, OSPF, RIP), VPN technologies (IPsec), and secure network design principles.
• Familiarity with reverse proxy services (HAProxy, Traefik), DNS management, and performance optimization techniques.
• Proficiency in using Ansible (and optionally Terraform) for network automation, with a working knowledge of monitoring/logging tools (Prometheus, Grafana, Loki).
• Fluent in English with excellent communication, documentation, and problem-solving skills