Network & Security Engineer (pfSense / OPNsense)

Accountabilities:: Manage day-to-day network and firewall operations while contributing to infrastructure projects and technical improvements. Independently implement, configure, maintain, and document IPSec VPNs and firewall rules using pfSense and OPNsense. Design and document network environments for customer and internal projects, ensuring configurations and implementation plans are documented before deployment. Perform advanced network troubleshooting, including deep packet analysis and the resolution of complex routing, switching, and VPN connectivity issues. Configure and maintain network infrastructure involving IPv4, IPv6, dynamic routing protocols, and switching technologies. Introduce and develop basic network automation using tools such as Ansible, Python, or Bash to streamline deployments and operational workflows. Collaborate with the Security Operations Center (SOC) team to analyze firewall logs, investigate security events, and help mitigate incidents. Identify opportunities to improve network configurations, technical designs, security practices, and operational efficiency. Train and onboard new colleagues, share technical knowledge, and contribute to the team's professional development. Participate in a rotating duty schedule with the Network Operations Center (NOC) and SOC teams, including nights, weekends, and public holidays. Take on additional responsibilities when needed to support colleagues, strengthen team capabilities, and expand technical expertise. Requirements: At least five years of relevant professional experience, excluding educational programs and internships. Extensive hands-on experience with pfSense and OPNsense firewall platforms. Strong practical knowledge of IPSec VPN implementation, configuration, and troubleshooting. Experience with BGP or other dynamic routing protocols. Solid understanding of IPv4 and IPv6 networking. Experience with switches, preferably Dell equipment, and networking in Proxmox environments. Initial practical experience with network automation using Ansible, Python, or Bash. Strong troubleshooting and analytical skills, particularly when diagnosing complex network and connectivity issues. An independent, structured, and proactive working style, with a strong commitment to accurate technical documentation. Excellent collaboration and knowledge-sharing skills, with the ability to work effectively within a distributed technical team. Fluency in English and Spanish. Willingness to participate in rotating shifts, including nights, weekends, and public holidays. Knowledge of German is an advantage. Practical, in-depth technical expertise is valued more highly than certifications. Seniority is assessed primarily through demonstrated skills and experience rather than years of service alone. Benefits: Fully remote working arrangement. Flexible working hours, with the ability to balance additional working hours and personal commitments within the organization's scheduling framework. Choice of working from home or from an office. Private health insurance. Flexible compensation benefits. Access to professional training programs, English classes, and professional certifications. Opportunities for continuous learning and career development. Collaborative working environment that encourages knowledge sharing and technical growth. Internal events, outdoor activities, team-building days, and padel matches. Office amenities, including refreshments and recreational facilities. Holiday flexibility and support for maintaining a healthy work-life balance.