Network Security Engineer

We are seeking a highly skilled Senior Network Security Engineer to design, implement, and support enterprise network security solutions across complex on-premises, cloud, and hybrid environments. The successful candidate will play a critical role in protecting the organisation’s infrastructure by implementing robust network security controls, leading security improvement initiatives, and ensuring compliance with security policies and industry standards.

The ideal candidate will possess deep expertise in firewalls, network segmentation, Zero Trust Network Access (ZTNA), VPN technologies, cloud network security, intrusion prevention systems, and security monitoring. Experience with Azure and AWS network security services is highly desirable.

Key Responsibilities

Network Security Engineering

• Design, implement, and maintain enterprise network security solutions.
• Develop secure network architectures aligned with Zero Trust principles.
• Configure and manage network security devices across global environments.
• Lead network security transformation and modernization initiatives.
• Conduct security assessments and architecture reviews for new projects and technologies.

Firewall Management

• Design, deploy, and administer enterprise firewall platforms.
• Review and implement firewall policies, NAT rules, and access control configurations.
• Perform firewall rule optimization and recertification exercises.
• Troubleshoot complex firewall and network security incidents.

Preferred Technologies

• Palo Alto Networks
• Check Point
• Cisco Firepower
• Fortinet FortiGate
• Juniper SRX

Cloud Network Security

• Design and secure network architectures within Azure and AWS environments.
• Implement cloud-native security services and controls.
• Secure hybrid connectivity between cloud and on-premises networks.
• Configure virtual firewalls, cloud security groups, and network segmentation controls.

Azure

• Azure Firewall
• Network Security Groups (NSGs)
• Azure Application Gateway
• Azure DDoS Protection
• Azure Virtual WAN
• ExpressRoute
• Azure Private Endpoints

AWS

• AWS Security Groups
• Network ACLs
• AWS Transit Gateway
• AWS Network Firewall
• AWS WAF
• AWS Shield
• AWS Direct Connect
• Amazon VPC

Network Segmentation & Zero Trust

• Design and implement micro-segmentation strategies.
• Develop Zero Trust Network Access (ZTNA) solutions.
• Implement Software Defined Perimeter (SDP) and SASE architectures.
• Reduce lateral movement risk through segmentation and access control strategies.
• Support secure remote access initiatives.

Security Monitoring & Threat Protection

• Deploy and manage network security monitoring solutions.
• Investigate and respond to network-based security incidents.
• Analyse security logs and network traffic for suspicious activity.
• Collaborate with SOC teams to improve detection and response capabilities.

Security Technologies

• Microsoft Sentinel
• Splunk
• QRadar
• Palo Alto Cortex XDR
• CrowdStrike Falcon
• Darktrace

VPN & Secure Remote Access

• Implement and support:
  • Site-to-Site VPNs
  • Client VPNs
  • IPSec Connectivity
  • SSL VPNs
  • Remote User Access Solutions
• Ensure secure connectivity for hybrid and remote workforce environments.

Vulnerability & Risk Management

• Perform network vulnerability assessments and remediation activities.
• Support penetration testing engagements.
• Identify and address network security weaknesses.
• Develop remediation plans for identified risks and vulnerabilities.

Compliance & Governance

• Ensure network security controls comply with:
  • ISO 27001
  • NIST Cybersecurity Framework
  • CIS Controls
  • GDPR
  • Cyber Essentials Plus
• Participate in audits and compliance reviews.
• Develop and maintain network security standards and operational procedures.

Experience

Required Skills & Experience

• 7-10+ years of experience in Network Security Engineering.
• Strong hands-on experience managing enterprise firewall platforms.
• Experience securing complex enterprise and cloud environments.
• Proven experience with network segmentation and Zero Trust initiatives.
• Experience supporting critical production environments.

Technical Expertise

Network Security

• Firewalls
• IDS/IPS
• Web Application Firewalls (WAF)
• DDoS Protection
• Secure Web Gateways
• Network Access Control (NAC)
• DNS Security

Routing & Switching

• BGP
• OSPF
• MPLS
• VLANs
• High Availability Architectures

Cloud Security

• Microsoft Azure Networking & Security
• AWS Networking & Security
• Hybrid Network Architectures
• Cloud Connectivity Models

Automation & Scripting

• PowerShell
• Python
• Terraform
• Ansible

Preferred Certifications

• Palo Alto PCNSE
• Check Point CCSE/CCSM
• Fortinet NSE 4/5/7
• Cisco CCNP Security
• Cisco CCIE Security
• CISSP
• CISM
• Microsoft Azure Security Engineer Associate (AZ-500)
• AWS Certified Security Specialty
• Certified Information Systems Security Professional (CISSP)

Key Competencies

• Strong troubleshooting and analytical skills.
• Excellent understanding of network protocols and security frameworks.
• Ability to work in high-pressure operational environments.
• Strong stakeholder and vendor management skills.
• Effective communication and documentation capabilities.
• Experience working within regulated enterprise environments.

Preferred Industry Experience

• Financial Services
• Banking
• Insurance
• Healthcare
• Telecommunications
• Energy & Utilities
• Retail
• Public Sector

Typical Deliverables

• Network Security Architecture Designs
• Firewall Rule Reviews and Optimisation Reports
• Network Segmentation Strategies
• Zero Trust Network Roadmaps
• Security Risk Assessments
• DDoS Protection Strategies
• Secure Remote Access Solutions
• Cloud Network Security Designs
• Operational Runbooks and Procedures
• Audit and Compliance Reports

Ideal Candidate

A seasoned Senior Network Security Engineer with extensive experience across Palo Alto, Check Point, Cisco, Fortinet, Azure, and AWS, capable of leading network security initiatives, implementing Zero Trust networking principles, and protecting enterprise environments against evolving cyber threats while ensuring operational resilience and regulatory compliance.