Network Specialist

Overview:
The Network Specialist is a critical senior network & firewall engineering role within the Bunge EMEA Network Team, responsible for designing, implementing, and maintaining secure, resilient network infrastructure across 4 data centers and 140+ sites in the region. This position requires deep expertise in Cisco networking (NX-OS, VXLAN) and Fortinet technologies (firewalls, switches, wireless access points), as well as advanced knowledge of routing protocols and security best practices. The EMEA team is one of four regional arms of the global Network tower supporting a global network of 700+ sites, and 20+ data centres across EMEA, SOAM, NOAM, and APAC. This position requires a strong understanding of networking principles and protocols, coupled with deep expertise in security best practices and threat mitigation.

Essential Functions:
Network Design & Engineering:
Architect, implement, and maintain enterprise network solutions leveraging Cisco Nexus platforms (NX-OS) with VXLAN overlays and Fortinet security appliances. Ensure high availability, scalability, and security across data centres, branch sites, and operational facilities.

Firewall & Security Management:
Configure, harden, and manage Fortinet firewalls (FortiGate) for data centers and sites, including advanced security features such as IPS, VPN, and segmentation & segregation. Implement secure policies across Fortinet firewalls, switches, and wireless access points.

Routing & Switching:
Design and maintain robust routing architectures using BGP. Ensure secure configurations and resilience against routing-based attacks. Troubleshoot complex routing and switching issues in large-scale environments.

Security Monitoring & Incident Response:
Monitor network traffic and firewall logs for anomalies using SIEM tools. Investigate and remediate security incidents, ensuring minimal MTTD and MTTR. Develop incident response playbooks tailored to network and firewall events.
Plays a crucial role in preventing data breaches, service disruptions, and reputational damage that could arise from compromised routing infrastructure.

Vulnerability Management & Compliance:
Conduct vulnerability assessments and remediations on Cisco and Fortinet devices. Ensure compliance with industry standards (NIST, CIS, ISO 27001) and internal security policies.

Collaboration & Leadership:
Act as a senior technical resource within the EMEA team and global network tower, providing guidance and mentorship to junior engineers. Collaborate as part of the global network teams to maintain consistent security posture and architecture across regions.

Continuous Improvement:
Recommend and implement emerging technologies to enhance network security and performance. Stay current with Fortinet and Cisco advancements, threat intelligence, and best practices.

Key Technologies:
Cisco: Nexus switches (NX-OS), VXLAN, OSPF, BGP
Fortinet: FortiGate, FortiSwitch, FortiAP, FortiManager, FortiAnalyzer, FortiSASE, FortiGuard inc IDS/IPS, FortiNAC
Other: VPN, Zscaler, SIEM, automation scripting (Python, Bash, PowerShell)

Qualifications:
Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience.
10+ years in enterprise network engineering and security roles.
Proven expertise with Cisco Nexus (NX-OS) and VXLAN architectures.
Proven expertise with with the Fortinet ecosystem including FortiGate, FortiSwitch, FortiAP, FortiManager, FortiAnalyzer, FortiFAP.
Strong understanding of the BGP routing protocols and security implications.
Advanced troubleshooting skills in large-scale, multi-site environments.
Relevant certifications highly desirable: Fortinet NSE 4-7, Cisco CCNP/CCIE, CISSP, CISM.

Recruitment process:
1. screening with Talent Acquisition Specialist
2. interview with Hiring Manager
3. interview with peers
4. interview with HR+peer from Geneva's office, probably in the office (in person) if it will be possible.