Manager - Firewall and VPN Engineering

Grant Thornton Capability Center Poland (GTCC) supports operations for the Grant Thornton Advisors multinational platform, connecting teams across markets and time zones. GTCC is part of a multinational platform with over 25,000 professionals across more than 20 firms, providing scale, coordination, and operational support. Employees contribute to meaningful work, tackling complex projects, working with advanced technologies, and collaborating internationally in an environment based on teamwork, knowledge sharing, and inclusion.

• Eight or more years in network or network security engineering, including at least two years leading engineers as a manager or team lead.
• Expert-level experience with enterprise firewall platforms such as Palo Alto Networks, Fortinet, Check Point, or Cisco, including centralized policy management.
• Strong command of remote access and site-to-site VPN technologies, including IPsec, SSL VPN, and modern zero trust network access.
• Experience running firewall change governance and rule recertification in an audited environment.
• Fluency in Polish and English.

Nice to have:

• Certifications such as PCNSE, NSE 7 or above, CCNP Security, or CISSP.
• Experience securing hybrid and multi-cloud network architectures and automating policy deployment through infrastructure as code.

• Lead a distributed team of firewall and VPN engineers, including work allocation, on-call coverage, performance feedback, and technical development.
• Own the firewall and VPN platform roadmap: hardware and software lifecycle, capacity, high availability design, and migration to centralized policy management.
• Govern the rule base through a documented change and review process, drive periodic recertification, and reduce shadowed, permissive, and unused rules on a measured schedule.
• Serve as escalation owner for major network security incidents and outages, and coordinate with network engineering, cloud, and application teams on resolution.
• Report on control effectiveness, service levels, and remediation progress to security leadership, and respond to internal audit and client assessment requests.