Network Security Engineer

Shape the Future of Secure Connectivity in the largest insurance company in the Nordics Do you want to work hands‑on with Palo Alto firewalls and network security in a modern hybrid environment – and help shape how If connects securely to datacentres, cloud and the internet? We are looking for a Network Security Engineer with senior PaloAlto NGFW experience to strengthen our Connectivity Platform and take our firewall and edge security services to the next level. About the role As Network Security Engineer, you will work with our PaloAlto NGFW’s and security platform across datacentres, cloud hubs and local internet breakouts. Your main responsibility is to help design, implement and operate secure, robust and standardized network security services that support If’s business and our technology strategy. In your daily work you will: Operate and develop our PaloAlto firewalls and related services – not just maintain existing rulebases, but actively improve how we design, structure and manage policies. Drive modernization of our Security Gateways, including adoption of new PaloAlto features and potentially new management solutions, in line with our future architecture. Work with automation and templates (APIs, scripting, IaC tools, etc.) to change how we handle policies and configurations – reducing manual work and the risk of human error. Design and refine security policies for data centers, internet breakouts and cloud hubs, with a clear focus on standardization and reuse. Support projects and migrations with secure connectivity designs and implementation, ensuring new solutions fit our long‑term network security direction. You’ll work both in a team and independently and take responsibility from an idea all the way to a running service. There is room to influence how we work and to grow your skills in cloud, security and identity. We offer In the same way that we place high demands on you as an employee, we also expect you to place high demands on us as an employer. Here are some of the benefits of working at If: An inclusive work environment where everyone is welcome Career and development opportunities in the biggest insurance company in the Nordics Social activities, as well as a highly skilled professional environment Possibility of hybrid workplace Health promoting workplace with e.g., wellness allowance and various sports activities Great insurance benefits About the team The team’s mission is to modernize and operate our network security edge – moving from traditional, manual policy handling to standardized, automated and platform‑oriented services. You’ll work closely with the rest of the Connectivity Platform, as well as with IT Security, IT Engineering and our sourcing partners, in a collaborative and hands‑on environment. The team consists of 7 SME’s based in Copenhagen, Denmark, Turku, Finland and Espoo, Finland. Who are you? You are self-driven and take responsibility. When you see something that needs fixing, you pick it up and follow it through. You like to work with others, explain things in a clear way, and care about doing a good job. You are curious and keep learning new things. You also have: Senior-level experience with PaloAlto NGFW Senior-level experience network fundamentals Senior-level experience designing or operating network security policies in Datacenter and/or cloud environments. Experience and interest in automation and standardization of firewall policies and configurations. Awareness of modern threats and security concepts (IPS/IDS, URL filtering, threat prevention, zero trust) and how they influence network design. Experience troubleshooting complex network/security issues and working in a structured way during incidents. Good command of Danish or Finnish and English It is an advantage if you also have: Experience of working in an enterprise environment Experience of working with Panorama and/or Strata Experience in Cloud(AWS or Azure) Experience with Splunk Experience with ServiceNow Experience with GitHub Enterprise Experience of ADO Additional facts and the recruitment process Application deadline: Screening and interviewing will start immediately. However, application deadline is 20.11.2026 To apply for the position: Please attach your CV and answer the questions in the application form. Work location: Copenhagen, Denmark, Turku or Espoo, Finland. Travelling: Some travelling will be expected Start: 1st of February, 2027 For more information, please contact Frederik Arntzen, Head of Connectivity, [email protected] It is a requirement for the position that If’s extended fit & proper requirements, including background checks, can be met. We look forward to your application!