Senior Network & Security Automation Engineer

The Networks & Datacenter (NW&DC) organization within Platform & Technology (P&T) forms the foundation of ABN AMRO's IT landscape. We provide secure, scalable and resilient infrastructure services that support thousands of applications, users and business-critical processes. As cyber threats increasingly hide within encrypted traffic, we are improving network security inspection. We are looking for an experienced Security Engineer who combines deep technical expertise with strong automation capabilities and a security-by-design mindset.

You will play a key role in designing, implementing and operating next-generation network security solutions while helping the organization move towards highly automated and policy-driven security services. As a Senior Network & Security Engineer, you will be responsible for the implementation, integration and operational support of security platforms that protect ABN AMRO against advanced cyber threats. You will work within a team of highly skilled engineers responsible for TLS/SSL Traffic Inspection solutions, Advanced Threat Protection implementation, Network security architecture and engineering, Security automation and Infrastructure as Code, Secure access and traffic governance, Operational support and continuous improvement.

You will act as a subject matter expert and hands-on engineer, bridging architecture, engineering, operations and security processes. In your role you will design, implement and optimize TLS/SSL traffic inspection solutions, deploy and manage Advanced Threat Protection capabilities to identify malicious encrypted traffic, engineer and maintain enterprise-scale security environments, support secure network segmentation and security policy enforcement, perform troubleshooting, root cause analysis and lifecycle management of security platforms, and participate in security incident investigations and remediation activities.

For platform engineering you will configure and manage Palo Alto Next Generation Firewalls, Palo Alto Panorama, F5 BIG-IP platforms, and Cisco networking and security technologies, maintain secure and highly available network security services, and implement changes in accordance with security and operational governance processes. For automation and DevSecOps you will develop automation solutions using Python, Ansible, REST APIs, Git, YAML and Infrastructure as Code principles, automate security policy deployment and compliance validation, contribute to CI/CD integrations for network and security services, and develop reporting, monitoring and operational dashboards.

For security governance and process you will support security audits, compliance activities and control validation, contribute to implementation of security standards and best practices, ensure solutions comply with regulatory requirements including DORA and internal security policies, and improve operational processes through automation and standardization.

Required experience: 5+ years of experience as a Network Security Engineer or Security Engineer, proven hands-on experience with Palo Alto Networks NGFW, Palo Alto Panorama, F5 BIG-IP, Cisco networking infrastructure, experience implementing TLS/SSL inspection solutions, experience with Advanced Threat Protection technologies, strong understanding of network security architectures, routing and switching, load balancing, proxy technologies, network segmentation, security policy management, and experience working within regulated enterprise environments.

Automation skills: practical experience with Python, Ansible, API integrations, Git, Infrastructure as Code, and the ability to automate operational and security processes.

Certifications: one or more of the following or equivalent: Palo Alto Networks Certified Network Security Engineer (PCNSE), Palo Alto Networks Certified Cybersecurity Associate (PCCSA), Cisco CCNP Security, Cisco CCIE Security, F5 Certified BIG-IP Administrator (201), or equivalent industry-recognized security certifications. The position starts on 1 November and applications close before 13 October. This is a full-time role (40 hours per week) in Amsterdam.