Network & Security Infrastructure Engineer - Network & Security

Location: Jakarta, Indonesia

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

Thales has been present in the Republic of Indonesia for 45 years in the defence, aerospace and space domains, delivering a wide range of civil and defence solutions that highlight our strong commitment to working with the Indonesian government and local stakeholders. In recent years, our innovative solutions in air traffic management systems and telecom satellites have further strengthened our presence in the country alongside our digital portfolio of solutions such as biometrics, data protection and cybersecurity now serving the needs of diverse customers in civil sectors.

As a Network & Security Infrastructure Engineer, you will be part of the Internet and Cloud Access Squad and actively contribute to various projects and tasks related to critical infrastructures.

Your main missions will include:

• Infrastructure Projects: Collaborate with the team to design, implement, and maintain network infrastructures, with a focus on Proxies, Sandbox, and Firewall systems.
• Operational Support: Assist in resolving network-related incidents and contribute to proactive performance monitoring of the network.
• Optimization & Security: Contribute to the continuous improvement of network-related processes and tools while ensuring security and compliance of network environments.
• Documentation & Reporting: Maintain accurate documentation of network configurations, operational procedures, and resolved incidents. Produce periodic reports on network performance and trends.
• Agile Collaboration: Participate in Agile team meetings, share progress and obstacles, and contribute to collaborative problem-solving.

Technical Skills:

• You can define and implement network requirements across various production processes.
• You have strong analytical skills and provide real expertise in Level 3 support.
• You can configure network and security equipment and other IT assets, including:
  • Proxies: Skyhigh (formerly McAfee), Zscaler, SSL inspection, Whitelist/Blacklist management, URL categorization, web filtering, content filtering, CAS.
  • Sandbox: Trellix (formerly McAfee), Zscaler.
• You have a strong appetite for automation, backed by solid skills in programming languages: Curl, PowerShell, Python, Bash.
• You have knowledge of cross-functional infrastructures and security domains, such as:
  • Firewalls: Palo Alto, Fortigate, Stormshield, Check Point, Juniper, L3/L4 Filtering, User-ID, App-ID, Next-Gen features.
  • Cloud Security: SASE, Zero Trust Network Access (ZTNA), DLP, CASB, SD-WAN, SWG.
  • Directories: Active Directory, LDAPS.
  • IAM (Identity & Access Management): Kerberos, SAML, Single Sign-On (SSO), Multi-Factor Authentication (MFA).
  • PKI (Public Key Infrastructure): x509 certificates, CMS, AEP, OCSP.
  • Cloud Computing: SaaS, IaaS, PaaS, Infrastructure as Code (IaC), automation via scripting (Python/Shell).
  • Virtualized Environments: ESX, VMs.
  • VPN Gateways: Cisco Firepower, Stormshield, AnyConnect client, The Greenbow client.
  • Load Balancers: F5 (LTM, APM), VMware NSX.

Soft Skills:

• You define solutions based on complexity.
• You have the ability to work effectively in an Agile environment, with a results-oriented approach.
• You anticipate, think big, start small, test and learn, fail fast, encourage collective intelligence while remaining value driven.
• You are empathetic and committed to user satisfaction.
• You can work with all levels of personnel within and outside your function and across various entities (e.g., CBU, countries, regions) with international teams.
• You have a strong command of professional English (spoken and written) for effective communication within international teams.
• You possess excellent planning and organizational skills.
• You have a strong ability to learn quickly and adapt to new technologies and procedures.
• You are autonomous, organized, dynamic, and a driver of change management, fostering teamwork in a fast-paced environment.
• You have strong technical writing skills.
• You are familiar with Thales’ IS/IT organization and passionate about the Group’s IS/IT transformation.
• You have a good understanding of Thales’ context (e.g., key IS/IT stakeholders, matrix organization).
• You are committed to Agile and digital workstyles that enhance collaboration and break down silos.
• You have programming/scripting skills (Python, PowerShell, Bash) for task automation.
• You are familiar with automation principles and orchestration tools like Ansible.

Required Experience:

• Prior experience in configuring network and security infrastructures (Proxies, Sandbox, LAN, Wi-Fi, WAN, Routers, Switches, Firewalls, etc.).
• Hands-on experience with system environments (Windows, Linux, ESX, etc.).
• Previous experience in project management (Waterfall or Agile).
• Knowledge of ITIL processes and ITSM tools.
• Experience in monitoring network performance, troubleshooting, diagnosing, and resolving software, hardware, and other network/system issues.
• Education: Bachelor's degree or equivalent, master's degree would be advantage.
• Due to the nature of the work, strong English skills, both written and verbal are required to effectively manage stakeholders.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.