1. Network & Security Architecture concept and implantation
   • Own the design and lifecycle of the two‑tier firewall architecture (Palo Alto at the edge and FortiGate at internal/DMZ tier ), including HA pairs, policy segmentation, and east–west traffic control.
   • Implement and optimize zone‑based segmentation, micro‑segmentation, and zero‑trust principles across datacenter, campus, and branch networks.
2. Routing, Switching & Performance
   • Design and operate BGP/OSPF between sites, ISPs, and MPLS/SD‑WAN (if applicable).
   • Manage L2/L3 infrastructure (Cisco/Aruba/Juniper/etc.): VLANs, VTP, LACP, Spanning‑Tree, HSRP/VRRP, QoS, and Multicast if used.
   •  Firewall & Threat Prevention (Palo Alto + FortiGate)
   • Own policy frameworks for App‑ID, User‑ID, SSL/TLS decryption (where appropriate), URL filtering, IPS/IDS, WildFire, DNS security, Anti‑Malware, and Geo‑IP.
   • Regularly review rules for recertification, cleanup shadowed/unused rules, and enforce least‑privilege.
3. VPN & Third‑Party Connectivity
   • Lead all site‑to‑site IPsec VPNs for branches and partners: key exchange (IKEv2), crypto profiles, PFS, lifetimes, tunnel monitoring, link redundancy, and failover.
   • Establish third‑party connectivity standards (onboarding checklist, routing policy, NAT strategy, scoped firewall policies, identity/control, logging & SLAs).
   • 5) Monitoring, Logging & Incident Response
   • Build and tune proactive monitoring/alerting (e.g., FortiAnalyzer, Panorama, Syslog/SIEM, NetFlow/IPFIX, SNMP, PRTG/SolarWinds/Zabbix).
   • Compliance, Risk & Change Management
   • Conduct periodic risk assessments, vulnerability remediation (with SOC/Blue Team), and policy attestation.
4.  Business Continuity & DR
   • Architect HA/failover for firewalls, VPN site to site , core switches, and WAN edge; test DR and site failover.
   • Maintain backup/restore procedures, configuration version control, and offline vaulting for device configs and licenses.
   • Leadership & Vendor Management

- Education: Bachelor’s in Computer Science, Information Systems, or related field (or equivalent experience).

- Experience: 3-5+ years in enterprise networking & security; 3+ years leading or architecting firewall/VPN environments at scale; proven experience with Palo Alto and FortiGate in production.

Technical:

a. Palo Alto: NGFW, Panorama, App‑ID/User‑ID, Threat/URL/AV/IPS, SSL decryption, WildFire, routing, HA

b. Fortinet: FortiGate, FortiManager, FortiAnalyzer, IPS/AV/Web filtering, SD‑WAN (preferred),HA

c. VPN: IPsec site‑to‑site (multi‑vendor), third‑party onboarding, dual‑ISP failover, BGP over IPsec (preferred).

d.Routing/Switching: BGP, OSPF, HSRP/VRRP, STP, VLANs, ACLs, NAT, QoS.

e.Tooling: Wireshark, packet capture on firewalls, NetFlow/ IPFIX, SNMP, syslog/SIEM (Q-Rada).

Certifications (strongly preferred)

a .PCNSE (Palo Alto Networks Certified Network Security Engineer)

b. Fortinet NSE 4–7 (or equivalent current NSE/FCX track)

c. CCNP Enterprise (or JNCIP/JNCIS)

d. ITIL Foundation (nice to have)

e. CISSP/CCSP (nice to have for policy/governance)

Benefit

- Salary: Negotiable

- Working Schedule: Monday to Friday, 8:00 AM-5:00 PM

- Transportation Allowance: Provided monthly gasoline allowance for traveling from home to work and back home.

- Transportation Gasoline: Provided to Outside Staff for Business’s purpose based on roles and responsibilities

- Motor Rental: Provided to Outside Staff.

- Maternity Allowance: Provided for baby delivered to Male and Female staff

- Marriage Allowance: Provided to all staffs

- Funeral Contribution: Provided to staff for staff’s relative in 1st generation

- Outpatient Coverage: Provided to all staffs and staff’s children

- Bonus: Twice per year for Khmer New Year and Pchum Ben festival

- Salary Increase: Once a year

- Seniority payment: 15 days of salary per year (in June and December)

- Contract Type: Unfixed Duration Contract (UDC)

- Health Check-up: Once a year with private hospital (Sunrise Japan Hospital Phnom Penh)

- Overtime: 200% on Public Holiday

- Cell Phone and Phone Card Allowance: Based on company’s policies

- Staff Loan: Provided to all staffs with low interest rate

- Motor Insurance: Covered on (Third Party Liability (TPL), Own Damage, and Theft) for Outside Staff

- Staff Insurance: National Social Security Fund( NSSF) for health and accident

- Leave Allowance: Annual Leave 18days/year, Sick Leave 6days/year,Special Leave 7days/year, Maternity Leave, Long Sick leave up to6months

- Covid-19 leave:Provided paid leave until staff recovers and medical expenses