Network & Security Engineer (all genders)

You develop and operate the connections between sites, applications and users. Segmentation, secure access and reliable troubleshooting are central. You work on networks whose rules must remain not only technically functional but also verifiable and maintainable.

A firewall rule should represent a required data flow. You document sources, destinations and services and check changes against the agreed segmentation design. For VPN and cloud connections, routing, DNS and MTU are part of the analysis. Packet captures and logs help address the cause rather than only the symptom. Configurations and approvals remain traceable; permitted and blocked connections are tested.

• Develop network and segmentation concepts and implement switching, routing and firewall rules.
• Set up secure site and remote connections and assess how they interact with identity and access rights.
• Narrow down connectivity problems using logs, packet analysis and measurements.
• Document changes, rules and recovery paths and coordinate them with the operations team.
• Create firewall and segmentation matrices with justified approvals and negative tests.
• Address VPN, routing and DNS problems through packet analysis and documented changes.

What matters is demonstrable experience that is relevant to the role. It may come from appropriate vocational training, a degree, professional practice or a well-founded career change. We will align the specific level of responsibility with your knowledge and experience.

• Practical experience with enterprise networks, routing and firewalls.
• Strong foundations in TCP/IP, DNS, VPN and network segmentation.
• Ability to analyse problems methodically and implement changes in a controlled manner.

This knowledge is helpful, but you do not need to have all of it at once. In your application, describe where you have already gained practical experience and which areas you would like to explore in greater depth.

• Experience with cloud networking, zero-trust access or centralised network management.
• Knowledge of network automation or securing particularly sensitive environments.

You deliver transparent network rules and secure connections with verifiable states. Quality is also reflected in how quickly other stakeholders can understand errors or required changes.

This role can be based in Cologne or performed remotely. We will agree the specific form of collaboration, project requirements and any necessary customer appointments before you start.

This role is offered as permanent employment on a full-time or part-time basis. We will agree the responsibilities, working hours, start date and compensation to suit the role and your level of experience.

Show us in your application which experience or interests you bring to this role. A CV and relevant project examples, certificates or work samples will help us assess your professional background. Please do not send confidential customer data, credentials or protected source code.

Tell us your preferred working model, your possible start date and whether you would like to work full-time or part-time.

If you have questions about the role, contact our recruitment team at hr@otoko.com. Inclusion in the applicant pool is voluntary and takes place only with separate consent; it is not a prerequisite for reviewing your application.