Senior Cyber Security Engineer (a)

Bern, 100 % *Security Engineering that must function in everyday life Cyber Security is not a theoretical discipline for us. Our infrastructure supports the daily operation of a large hospital environment and connects classic ICT with clinical systems, medical devices, imaging systems, and highly available services. Our environment is technically diverse and partly grown historically. Therefore, we are looking for an experienced personality who understands connections, remains calm even during complex disturbances, and not only conceives security solutions but also operates and develops them effectively. For our Network & Connectivity team, we are looking for a Senior Cyber Security Engineer with a focus on Firewall, Proxy, incident processing, and Security Engineering.* What awaits you ## • Together with the team, you are responsible for the operation and further development of our central security platforms with a focus on Firewall and Proxy. • You work in a highly available environment with around 60 virtual firewall instances in our Data Centers. • You analyze and process demanding incidents and technical disturbances in the extended second-level environment and at the interface to third-level topics. • You plan and implement updates, changes, and technical improvements, taking into account security requirements, network architectures, and operational dependencies. • You review and optimize rules, configurations, and technical processes and develop them sustainably. • You contribute your experience to projects, especially in the further development of network segmentation and the implementation of our zone concept. • You provide support for complex issues surrounding VPN, Web Application Firewall, and cloud-proximate security services. • You are a technical sparring partner for less experienced colleagues and pass on your knowledge in daily work. • You work together with internal specialist departments, the business, and external partners and translate requirements into viable technical solutions. What you bring with you ## • Completed training in computer science, ideally with further education at HF or FH level, or a comparable qualification with corresponding practical experience. • Several years of experience in the engineering and operation of security solutions in an enterprise environment, especially in the area of Firewall and Proxy. • Very good understanding of networks, network architectures, routing, communication flows, and technical dependencies. • Experience with incidents, changes, updates, and structured operational processes. • Good knowledge of VPN technologies and their integration into complex network environments. • Experience with Web Application Firewalls is an advantage. It is important that you understand their way of functioning, integration, and typical sources of error. • Knowledge in cloud-proximate security topics, Microsoft 365, Zero Trust approaches, or modern Secure Access concepts is welcome, but not a requirement. • Good German skills as well as good technical English. • Experience in a hospital environment or in another regulated or highly available environment is a plus. ¨ What is personally important to us You work pragmatically, reliably, and solution-oriented. Even with complex disturbances, you proceed in a structured manner and stick with a problem until the cause and solution are comprehensible. You take responsibility and enjoy not only designing solutions but also implementing and operating them. In doing so, you enjoy working in a team but can also drive demanding technical topics forward independently. You do not have to have an answer to every problem immediately. What is decisive is that you communicate openly, analyze cleanly, and share your knowledge with others. Our offer ## • A technically demanding role with a direct impact in a highly critical hospital environment. • A versatile infrastructure with an extraordinarily wide portfolio of devices, systems, and applications that must be protected. • A task that combines engineering, incident processing, operation, and further development. • The opportunity to actively further develop our network and security architecture. • Exciting projects regarding segmentation, zone concept, and central security services. • Collegial cooperation in an environment in which security, availability, and clinical reality are considered together. • A hybrid working model with up to 40 percent Home Office. Regular presence on-site in Bern is important for teamwork and operational topics. • No on-call service. Planned assignments outside of usual working hours may be required occasionally for updates or larger changes. Good to know This role is not a SOC analyst position. Our team does not primarily monitor and evaluate threats, but is responsible for the technical implementation and operation of central security measures. We operate and change the platforms on which firewall rules, proxy services, network segmentation, and other protection mechanisms are implemented. In doing so, we create, among other things, the technical prerequisites for requirements from the SOC and other security specialist departments. The role is also not a pure architecture, governance, or project management position. It suits you if you like working technically, take responsibility in operations, and want to make an existing environment better step by step. Direct applications will be treated preferentially. Job information ## Location Insel Gruppe Organization Direktion Technologie und Innovation Percentage 100 % Entry per sofort or n. V. Reference number 19409 Contract type unbefristet Work location Inselspital, Freiburgstrasse CH-3010 Bern, Schweiz