Architect firewall - n

About Proximus NXT

Proximus NXT Luxembourg supports all organizations in their digital transformation, by providing holistic ICT & Telecommunication solutions, as well as tailored managed services. With our partners and customers, we co-create opportunities and enable growth in a secure and sustainable manner. As a result of our unique expertise in next-gen IT services, mobile and advanced connectivity, we help our customers achieve their ambitions and realize their vision.

Together with them and our partners we implement sovereign and trusted solutions that make people work smarter.– www.proximusnxt.lu


Your mission :

Employment Type: Full-Time

About the Role:
We are seeking a highly skilled Firewall Architect with extensive experience in firewall deployment and rule automation to lead the design, implementation, and automation of our firewall infrastructure. The ideal candidate will have deep expertise in tools like NetBox, Ansible, and AWX, and will be instrumental in driving the automation and modernization of our firewall systems.

Key Responsibilities:

1. Firewall Architecture and Design:
o Design scalable, secure, and efficient firewall architectures tailored to business needs.
o Develop and document high-level and low-level designs (HLD/LLD) for firewall deployments.
2. Automation and Deployment:
o Implement automated workflows for firewall deployments using Ansible and AWX.
o Create and manage playbooks for automated configuration of firewall policies, rules, and objects.
o Automate the lifecycle management of firewalls, including patching, upgrading, and decommissioning.
3. Firewall Rule Automation:
o Design and deploy automated solutions for rule provisioning, de-provisioning, and validation.
o Ensure compliance and security by automating rule audits and remediation processes.
4. Integration with Source of Truth (NetBox):
o Integrate NetBox as a source of truth for firewall configurations and parameters.
o Ensure accurate synchronization between NetBox and the firewall management platform.
5. Collaboration and Support:
o Collaborate with network, security or CMDB teams to ensure firewall designs align with overall infrastructure goals.
o Provide technical guidance and mentorship to operational teams on automation best practices.
6. Monitoring and Optimization:
o Integrate tools to monitor firewall performance and health.
o Continuously optimize automation workflows for efficiency and scalability.
7. Documentation and Standards:
o Maintain comprehensive documentation for all automation workflows and firewall configurations.
o Define and enforce automation standards and best practices.


Your profile :

* Technical Expertise:
o Strong experience with firewall platforms (e.g., Fortinet, Checkpoint, IPTABLE or equivalent).
o Proficiency in automation tools, especially Ansible and AWX.
o Hands-on experience with NetBox for infrastructure documentation and automation.
o Solid skills in Linux and bash.
* Automation Experience:
o Proven track record in deploying automated firewall solutions at scale.
o Familiarity with CI/CD pipelines and integrating infrastructure automation workflows.
* Soft Skills:
o Strong problem-solving and analytical skills.
o Excellent communication and documentation abilities.
o Ability to work collaboratively in cross-functional teams.
* Preferred:
o Certifications such as Red Hat Certified Specialist in Security: Linux, Fortinet NSE, or equivalent.
o Familiarity with GitLab or equivalent for managing automation code


Our offer :

A professional and stimulating work environment in the IT & telecom sector. Multiple career opportunities within the Proximus Group at national and international level, cutting-edge training in new technologies, a wealth of recognized expertise. We also offer an attractive salary package and many other benefits.

Our company is an equal opportunity employer, valuing diversity in all its forms. We firmly believe that each individual brings a unique richness to our teams, and we are committed to creating an inclusive environment where every voice counts.

If at the end of the process your application is successful, you will be asked to provide an extract from your criminal record. Your personal information will be handled in compliance with applicable data protection laws.