2. Pracovní nabídky
  3. Network Security Engineer (Fortinet)

Network Security Engineer (Fortinet)

The Fortinet team is growing — we're adding an engineer to own delivery for a defined set of clients, working alongside the team's experienced Fortinet lead.
Prague-based, remote-friendly, permanent contract — freelance possible.
75 000–90 000 CZK/month + 15 % annual bonus.
EU work permit + long-term CZ residency + Czech/Slovak language required.

Mám zájem
Typ

Permanent
Contract

Úvazek

Full time

Finance

75.000 - 90.000 CZK

Lokalita

Hlavní město Praha
Hybrid

ID

STQ_539_JOB

About our client

International technology group with 30+ years in the market, 800+ professionals, and offices across Central and Eastern Europe. They deliver projects in IT infrastructure, data centres, cloud solutions, and cybersecurity.

The company is growing — new projects, new clients, expanding demand. The Network & Security division runs a team of 20 engineers across Cisco, Checkpoint, Palo Alto, and Fortinet. Fortinet projects are picking up, and the team is scaling delivery capacity alongside its Fortinet lead.

▸ Why This Role Exists Now

Fortinet projects are expanding faster than the current team can absorb. The Fortinet practice already has an experienced lead in place — this role adds another engineer to take ownership of delivery for a defined set of clients and projects.

Job description

▸ Role / Mission

You join the Fortinet team, working alongside the team's Fortinet lead. You own delivery for a defined set of clients and projects — you design and implement solutions, and you're the day-to-day contact for the accounts you run, with backup from the lead on the toughest cases.

After 12 months, this is what good looks like: you're running your own client portfolio end-to-end and your solutions are in production without hand-holding.

▸ Key Responsibilities

- You design, implement, and service network security solutions — primarily Fortinet (FortiGate, FortiManager, FortiAnalyzer) — for the clients and projects you own
- You handle client communication for your accounts — technical presentations, consultations, solution proposals
- You escalate the toughest cases to the team's Fortinet lead, and you're the first point of contact on your own accounts
- You contribute to cloud-based Fortinet deployments (AWS/Azure)
- You work with presales and sales on your own projects

▸ What This Role Is NOT

- Not pure operations — you own projects, not just tickets
- Not a management role
- Not isolated work — without client and team communication, this doesn't work

▸ Operating Model

Prague-based, remote-friendly. More time in the office during onboarding. After that, remote is possible — but you're expected at the office or client sites as needed. Most of the business is in and around Prague, so a reasonable commute matters. Standard on-call rotation within the team. Direct report: Head of Network & Security division.

Requirements

▸ What Matters Most

- Fortinet hands-on — solid experience with FortiGate, NGFW, VPN. Fortinet is the primary vendor here, not one of many
- 2+ years in network security — design, implementation, service. Not just monitoring
- Client-facing communication — you're comfortable presenting your own solutions and handling client calls
- Security fundamentals — NGFW, VPN, and a working understanding of NAC/SD-WAN concepts

Fluent Czech or Slovak required. English at a level where you can handle a normal working discussion.

▸ Nice to Have

- Experience with Cisco or Palo Alto (the team works with these vendors too)
- FCP certification, or working toward CCNP/PCNSE
- Cloud deployments (AWS/Azure)
- Python for automation
- University degree

These are nice to have — not hard filters.

Offer & Terms

- 75 000–90 000 CZK/month + 15 % annual bonus
- Freelance possible — the B2B track requires a registered EU freelance/business licence
- Company laptop + phone
- Multisport card
- Employer pension contribution (DDS)
- HW/SW purchase allowance
- Language courses
- Financial bonuses for life events (birth of a child, wedding)
- Company events, team buildings, sports activities
- Extra days off
- Certification support — Fortinet NSE track, vendor training budget

More information

▸ Interested? Reach out

A link to your LinkedIn is enough — no CV needed. If your profile isn't quite up to date and you don't have the time or energy to fix it, just send a few lines about your 2–3 most recent projects instead.

▸ What Happens Next

- First, a quick call with us — no recruiter fluff, straight to the point.
- Then 1–2 classic rounds with the client — expertise & fit.
- We'll get back to you at every step of the process, either way. Sometimes it takes a bit longer, and we're not perfect either, but we know you don't need more ghosting.

A dedicated consultant handles this position.
Recruitment quality is personally guaranteed by SITEQ's founder, backed by his own long-standing IT background & 500+ placements.

| linkedin.com/in/jirisoljak
We speak your language.

Open only to candidates eligible to work in the EU without visa sponsorship, residing in the Czech Republic long-term, with proficiency in Czech or Slovak.

Other open positions: siteq.cz/en/jobs.
Thank you!

Mám zájem
Mám zájem

Mám zájem o tuto pozici

+420 222 765 001

>_Dejte nám o sobě vědět

    Podobné pozice

    IAM / Identity Security Analyst

    Lokalita

    Hlavní město Praha
    Hybrid

    Typ

    Permanent
    Contract

    Obor

    Networks / Security

    Finance

    75.000 - 110.000 CZK

    International technology group with 30+ years in the market, 800+ professionals, and offices across Central and Eastern Europe. They deliver projects in IT infrastructure, data centres, cloud solutions, and cybersecurity. The company is growing — clients are expanding their demand, new projects are coming in, and there's space for new competencies. The Cyber Security / IAM division currently works heavily with the IdStory platform, but the environment includes other IAM/IDM solutions too. They need someone who can handle the full cycle from analysis to implementation. Why This Role Exists Now: Client demand for identity security is growing. The IAM division is expanding its project portfolio and needs someone who can own the full delivery cycle — from analysis through architecture to go-live. There's space for new competencies and platforms beyond IdStory. The right person can shape what the IAM practice looks like going forward.What Matters Most: — IAM/IDM experience — minimum 3–5 years in IT security / IAM. Real implementation experience, not just operations — IAM platforms — IdStory, SailPoint, One Identity, Entra ID, Okta, or similar. Knowing one superficially isn't enough — Client-facing communication — analysis, consultations, presenting solutions. This is non-negotiable — Integration and APIs — REST, SOAP, GraphQL. You know how to connect systems Fluent Czech or Slovak required. English at a level where you can handle a normal working discussion. Nice to Have: — SQL and databases — you work with data, not just look at GUIs — Scripting (Groovy, PowerShell, Python) — Basic Linux knowledge — Identity governance concepts and identity lifecycle management — Experience with HR systems and their integration with IAM These are nice to have — not hard filters.Role / Mission: You own the full cycle — from the first client workshop through architecture to go-live. You walk into a client's environment, map what's actually there, ask the right questions, pull the data together into a document, and design a new architecture. Then you implement it. You're an analyst and implementer in one — not someone who waits for a spec. After 12 months, this is what good looks like: completed projects, clients who trust you, and working identity integrations in real environments. Key Responsibilities: — You analyse customer requirements and design IAM/IDM architecture — You implement and integrate identity solutions into client environments — You handle incidents and operational support within SLA — not as the core of your work, but as part of it — You create technical documentation — actually useful materials, not formal paperwork — You provide technical consultations to clients — You contribute to presales — solution proposals, presentations, technical input for bids — You work with sales, presales, support, and delivery teams What This Role Is NOT: — Not AD administration — you won't be resetting passwords and creating accounts — Not a pure operations role — SLA tickets are part of the job, but not the core — Not an isolated position — client and team communication is key Operating Model: Prague-based, remote-friendly. More time in the office during onboarding. After that, remote is possible — but you're expected at the office or client sites as needed. Most of the business is in and around Prague, so a reasonable commute matters. No 24/7 on-call. Permanent contract preferred, freelance possible. Czech or Slovak proficiency required. Direct report: Head of Network & Security division.More Information: Interested? Apply or get in touch: | linkedin.com/in/jirisoljak No CV needed — a LinkedIn profile and a few sentences about yourself is enough. You'll speak directly with a senior IT recruiter with hands-on IT background — 450+ hires. A relevant conversation without the HR fluff. Process: — Short intro call (15–30 min) — Maximum 2 rounds — if there's a fit, a decision can come after the first one — In-person meeting before the final decision — You'll know where you stand at every step EU work authorization required. No visa sponsorship.

    Senior Middleware Engineer

    Lokalita

    Hlavní město Praha
    Hybrid

    Typ

    Permanent

    Obor

    Networks / Security

    Finance

    90.000 - 105.000 Kč

    This is the global IT arm of one of the world's largest logistics companies — over 5,600 IT professionals across continents, keeping the technology backbone running behind a business that moves shipments through hundreds of countries. The Prague office is one of the group's key IT hubs, and along with locations in Malaysia, India, Germany and the Americas, it holds Great Place to Work certification. The philosophy here is simple: digitalisation should work quietly in the background. The messaging and middleware layer is exactly what keeps communication between hundreds of internal systems running — and this team is still growing.— Middleware background — hands-on IBM MQ experience, or a strong generic middleware background (JBoss, Apache, WebLogic/WebSphere) with willingness to grow into IBM MQ — Linux — RedHat experience in a production environment — Independence under pressure — ability to work independently and prioritise when handling incidents — English — advanced, spoken and written, for daily cross-region communication No IBM MQ experience yet? If the middleware fundamentals and Linux are solid, we still want to talk. Nice to Have: — Kafka — Windows Server, OpenShift — Basic Microsoft Azure — Experience with SFTP and related transfer processes — Experience escalating to vendors (IBM, Oracle, Red Hat)You're part of an expert team for the middleware and messaging layer — IBM MQ, Kafka, WebLogic, WebSphere Application Server, Tomcat, JBoss, Apache, IIS — plus the virtualisation and infrastructure layer underneath. You handle what didn't get fixed one level down: a stuck queue in IBM MQ, a crashed application server, a bug that needs escalating straight to the vendor. It's hands-on technical work with real impact — without you, communication between dozens of internal systems simply doesn't run. Key Responsibilities: — You diagnose and resolve non-trivial problems across middleware platforms — the stuff lower-level support couldn't crack — You get into the virtualisation and infrastructure layer underneath the applications, not just the middleware itself — You work with other IT teams on harder troubleshooting that goes beyond middleware — You escalate to vendors (IBM, Oracle, Red Hat) for bugs and security fixes, and you see it through to resolution — You pass on what you learn — you know where the next problem will show up, before it does What This Role Is NOT: — The Prague office is part of the deal — this isn't a remote role — On-call rotates between colleagues and only covers weekends — nobody's chasing you on weekdays Operating Model: Follow-the-sun team across Asia, Europe and the US, with on-call on a rotation, weekends only. Based in Prague, hybrid — 2 days on-site, 3 days home office per week, with flexible hours. English is the working language for cross-region collaboration. The team manager has the same technical background — started out as a middleware/Unix engineer, now runs the global messaging team.Interested? Apply or reach out — no CV needed, your LinkedIn and a few lines about your experience are enough. We reply to everyone within two business days. | linkedin.com/in/jirisoljak You'll speak directly with a senior IT recruiter with hands-on technical background — a relevant conversation, no HR fluff, no ghosting. Open only to candidates eligible to work in the EU without visa sponsorship, residing long-term in the Czech Republic, with proficiency in Czech or Slovak.
    Všechny pozice
    Práce v IT