Level 3 Network & Security Design Expert

BUCHAREST

ENGIE GBS ROMANIA

One of the world's leading energy companies, ENGIE is present across the entire energy chain, in electricity and natural gas, from upstream to downstream. By placing responsible growth at the heart of its businesses (energy, energy services and the environment), its mission is to meet major challenges: meeting energy needs, ensuring security of supply, combating climate change, and optimizing the use of resources.

GBS is part of ENGIE, partnering with the support functions for the ENGIE's Business Units and Corporate. It currently has 7 Business Support functions: purchasing, consulting, finance, real estate and logistics, legal, human Resources, information systems. By 2025, GBS is ENGIE's "transition maker" for support function excellence. Amplifying ENGIE's net zero mission, we provide a competitive edge through efficient operations, strategic resource allocation, and pioneering in culture and technology.

The Network and Connectivity (NAC) department, part of GBS IT’s Network & Cybersecurity Services (NCS), supports network and security services across data centers, cloud platforms (AWS, Azure), and remote sites. Key solutions include Zscaler VPN, Cloud Proxy, and Software-Defined WAN, LAN, and Wi-Fi.

The NAC Expertise team (~30 engineers) designs, builds, and supports all network and security solutions. They lead projects from design to deployment, ensure smooth handovers to operations, and continuously optimize infrastructure and documentation.

At ENGIE, every talent has a role to play in accelerating the energy transition. Make a difference and enjoy a fulfilling professional experience, take on exciting challenges, and shape the path that suits you. Join us and be part of the adventure of our century!

What you will do:

• Design firewall, proxy, and load balancing solutions aligned with business needs and current design standards.
• Collaborate closely with architects on High-Level Designs (HLD) and develop detailed Low-Level Design (LLD) documents.
• Deploy solutions into the production network using controlled and well-planned processes.
• Ensure thorough and accurate handover of implemented solutions to the operations team.
• Provide expert support for complex or critical incidents involving proxy, load balancing, and firewall infrastructure.
• Conduct end-to-end performance troubleshooting to identify and resolve network performance issues.
• Document network configurations using Layer 2/Layer 3 diagrams (Microsoft Visio) and maintain updated design records.
• Develop comprehensive migration plans and test plans to support major changes and validate post-change functionality.
• Prepare high-level change descriptions to facilitate approval by the Change Advisory Board (CAB).
• Produce detailed reports on performance troubleshooting and post-implementation outcomes.

Desired education, expertise, and skills: 

• Strong knowledge of global network and security technologies, including DNS/DHCP, firewalls (Palo Alto, Fortinet), IPS, proxy (Zscaler), load balancing (F5), VPN SSL, and logging (Splunk).
• Deep understanding of LAN/MAN/WAN architectures, TCP/IP, Ethernet, virtualized network models, VLANs, and VRFs.
• Experience with cloud platforms AWS and Azure, including their network and cybersecurity concepts.
• Advanced TCP troubleshooting skills and familiarity with Cisco routers and switches, plus awareness of design limitations for network/security platforms.
• Proven ability to design scalable network architectures and produce detailed documentation using Microsoft Visio, including HLDs, LLDs, and migration plans.
• Strong team player who takes initiative, communicates openly and clearly, and can work autonomously while collaborating with management and peers.
• Skilled in understanding customer requirements and providing clear, practical advice to clients and stakeholders.
• Capable of documenting complex designs and guiding operational teams.

Benefits:

• • Private health insurance for you and your family;
  • Opportunities for ongoing personal and professional development;
  • Meal tickets;
  • Work-life balance;
  • Annual extended holiday entitlement, depending on the length of employment;

Only candidates selected for interviews will be contacted.

If you decide to send us your personal information in order to apply for this position, please be aware of our job candidate GDPR Data Privacy Notice: https://www.engie.ro/wp-content/uploads/2022/09/ER_Nota-de-informare-Candidati.pdf.

ENGIE is an Equal Opportunity Employer. Our commitment is unwavering: we do not discriminate based on race, color, age, sex, religion or religious creed, national origin, marital status, gender expression, genetic information, sexual orientation, ancestry, mental or physical disability, military or veteran status, or any other characteristic protected by law.