XTREME IT

Careers

Build the networks that critical organisations depend on

At Xtreme IT, you work on networks that cannot afford to fail: production sites, refineries, offshore platforms, aerospace and defence environments and multi-country estates. Since 2020, our team has delivered projects in 18 countries and on more than 60 sites.

We are a team of senior engineers. The people who design a network are the people who configure it, so you will own your work from the first survey to the signed handover.

How we work

  • Hands-on, end to end. You take part in assessment, design, implementation and operation, not just one stage.
  • Documentation first. Every change is planned, approved and recorded. We work with SOPs, change requests and as-built documentation, because that is what our clients and their auditors expect.
  • Planned work on live sites. Many of our cutovers happen on production sites, out of hours, with a rollback decision point at every critical step.
  • International by default. Our clients operate in 18 countries. You will work with international teams and, for on-site phases, travel to client locations.

Open position

Network Security Engineer

Location: Bucharest, Romania
Employment type: Permanent (indefinite-term) contract

The role

As a Network Security Engineer, you will design, implement and operate security controls across multi-site enterprise networks, working directly with our clients' IT and security teams. You will take part in projects, from LAN refreshes to access control rollouts, and in the day-to-day operation of client environments under our managed network services.

What you will do

  • Design, deploy and maintain next-generation firewalls, including policy design, rule-base reviews and clean-up of legacy configurations.
  • Implement network segmentation between user, server, production, operational technology and guest environments.
  • Roll out and support 802.1X network access control in phases, from validation to full enforcement.
  • Configure and support secure remote access for staff, suppliers and administrators.
  • Administer privileged access management tooling and enforce controlled, audited administrative access.
  • Plan and execute firmware and patch management according to documented procedures.
  • Handle incidents, requests and changes in the client's ITSM tools, following ITIL processes.
  • Produce and maintain technical documentation: configurations, diagrams, change records and evidence for compliance frameworks such as CMMC and ISO 27001-aligned processes.
  • Take part in out-of-hours cutovers and hypercare periods after go-live.

What we are looking for

  • Solid hands-on experience in network security engineering in enterprise environments.
  • In-depth knowledge of at least one major firewall platform: Fortinet, Palo Alto Networks, Check Point or Cisco.
  • Strong understanding of routing, switching, VLANs, VPNs and network segmentation.
  • Practical experience with 802.1X and RADIUS-based network access control.
  • Experience working with ITSM tools and change management processes.
  • Clear written documentation skills and a disciplined approach to change.
  • Professional working proficiency in English, written and spoken.
  • Willingness to work occasional out-of-hours windows and to travel for on-site project phases.

It is an advantage if you have

  • Vendor certifications such as Fortinet NSE, Palo Alto Networks PCNSE, Check Point CCSA/CCSE or Cisco CCNP Security.
  • Experience with BeyondTrust or other privileged access management solutions.
  • Experience with ServiceNow.
  • Experience in regulated environments: aerospace and defence, oil and gas or manufacturing.
  • Knowledge of compliance frameworks such as CMMC or ISO 27001.

What we offer

  • Work on complex, multi-country projects in demanding environments.
  • A senior team where your expertise is used, not diluted.
  • Clear processes and documentation standards that make your work predictable and reviewable.

How to apply

Send your application to office@xtremeit.ro, attaching your CV in PDF format. We review every application and will contact shortlisted candidates for an initial conversation.

Don't see the right role?

We are always interested in hearing from experienced network and security engineers. Send us a general application and tell us what you would like to work on.