Senior Security Engineer – Enterprise Infrastructure
We're supporting a well-established organisation in New Zealand’s digital services sector to appoint a Senior Security Engineer. This is a critical internal-facing role focused on securing enterprise-grade infrastructure across a large and complex technology environment.
The role sits within a modern Agile framework that supports cross-functional collaboration, fast decision-making, and continuous improvement. You’ll work alongside experienced engineers to strengthen core network security services and help shape future architecture and practices.
What You’ll Be Doing:
- Providing operational support and administration for internal security infrastructure, including Next-Generation Firewalls, Secure Service Edge (SSE) platforms, and web filtering tools.
- Managing lifecycle activities such as patching, capacity planning, and vulnerability remediation.
- Supporting audit, compliance, and governance efforts as required.
- Contributing to project teams delivering upgrades, migrations, and new security implementations.
- Driving improvements in security tooling, processes, and operational resilience.
- Participating in incident, change, and problem management workflows.
- Mentoring junior engineers and supporting documentation and knowledge sharing.
- Participating in an on-call rotation and responding to escalated issues as needed.
- Demonstrated experience in a security engineering role within a large enterprise or managed services environment.
- Proven expertise with Fortinet and Checkpoint firewall technologies (essential).
- Experience working with web proxy platforms, intrusion prevention/detection systems (IPS/IDS), and SSE solutions.
- Solid understanding of routing and switching fundamentals.
- Familiarity with application-layer protocols (e.g., TCP, UDP, HTTP) and common attack surfaces.
- Skilled in analysing network traffic and using protocol monitoring tools.
- Experience in environments with strong operational disciplines (e.g., ITIL, DevSecOps, or Agile delivery models).
- Fortinet NSE 7
- Checkpoint CCSE
- Other relevant network security or vendor certifications also valued
