Senior Security Engineer

Senior Security Engineer – Enterprise Infrastructure

We're supporting a well-established organisation in New Zealand’s digital services sector to appoint a Senior Security Engineer. This is a critical internal-facing role focused on securing enterprise-grade infrastructure across a large and complex technology environment.

The role sits within a modern Agile framework that supports cross-functional collaboration, fast decision-making, and continuous improvement. You’ll work alongside experienced engineers to strengthen core network security services and help shape future architecture and practices.

What You’ll Be Doing:

• Providing operational support and administration for internal security infrastructure, including Next-Generation Firewalls, Secure Service Edge (SSE) platforms, and web filtering tools.
• Managing lifecycle activities such as patching, capacity planning, and vulnerability remediation.
• Supporting audit, compliance, and governance efforts as required.
• Contributing to project teams delivering upgrades, migrations, and new security implementations.
• Driving improvements in security tooling, processes, and operational resilience.
• Participating in incident, change, and problem management workflows.
• Mentoring junior engineers and supporting documentation and knowledge sharing.
• Participating in an on-call rotation and responding to escalated issues as needed.

What You’ll Bring:

• Demonstrated experience in a security engineering role within a large enterprise or managed services environment.
• Proven expertise with Fortinet and Checkpoint firewall technologies (essential).
• Experience working with web proxy platforms, intrusion prevention/detection systems (IPS/IDS), and SSE solutions.
• Solid understanding of routing and switching fundamentals.
• Familiarity with application-layer protocols (e.g., TCP, UDP, HTTP) and common attack surfaces.
• Skilled in analysing network traffic and using protocol monitoring tools.
• Experience in environments with strong operational disciplines (e.g., ITIL, DevSecOps, or Agile delivery models).

Preferred Certifications:

• Fortinet NSE 7
• Checkpoint CCSE
• Other relevant network security or vendor certifications also valued

REF#129990. Contact grant.habgood@beyond.co.nz for further details.