Network Security Engineer

Responsibilities:

- Implementasi Proyek & Deployment: Melakukan instalasi fisik/virtual dan konfigurasi tingkat lanjut untuk perangkat keamanan jaringan seperti Next-Generation Firewall (NGFW), Web Application Firewall (WAF), dan Secure Access Secure Edge (SASE) di berbagai lingkungan klien (On-Premise maupun Cloud).

- Pemeliharaan Proaktif (Maintenance): Melakukan aktivitas maintenance berkala untuk klien, termasuk firmware/software upgrades, patching kerentanan, backup konfigurasi, dan health check perangkat secara rutin.

- Manajemen Perubahan (Change Management): Mengeksekusi Change Request (CR) yang kompleks dari klien terkait topologi jaringan, penambahan site baru (Site-to-Site VPN), atau penyesuaian policy skala besar pasca-implementasi.

- Dukungan Pasca-Implementasi (Troubleshooting): Melakukan investigasi mendalam (troubleshooting) terhadap isu-isu jaringan atau penurunan performa yang muncul setelah perangkat baru diimplementasikan, hingga masalah tersebut terselesaikan (eskalasi ke prinsipal/vendor jika diperlukan).

- Dokumentasi Teknis: Menyusun dan memperbarui dokumen teknis proyek, termasuk Low-Level Design (LLD), As-Built Document, User Acceptance Test (UAT), dan panduan operasional (SOP) untuk proses serah terima (handover) ke tim Operasional (SOC/NOC).

Requirements:

1. Education: S1 from IT or Related Major.

2. Skills:

a) Experience: 3+ years of Network Security implementation or Operation.

b) Hands-on experience in implementing network security projects as an engineer or project manager (specialty in one of Fortinet, Palo Alto Networks, Check Point, or Cisco).

c) Able to develop High Availability solutions (Active-Active / Active-Passive), Virtual Domains/Systems (VDOM/VSYS), and BGP/OSPF routing in firewall devices.

d) Have experience in using migration tools such as FortiConverter, Palo Alto Expedition, is a plus or experience in migration project.

e) Expert in designing VPN (IPsec Site-to-Site yang kompleks, SSL VPN, SD-WAN dasar).

f) Deep understanding in architecturing LAN/WAN, VLAN tagging, NAT, and network protocol.

3. Experience: Minimum 3 Years experiences in infrastructure or Network.