Network Security Engineer - Azure - Cisco
A Leading Financial Services firm are looking to hire an experienced Network Security Engineer with specific experience with both CheckPoint and Cisco.
- £500 -£597 a day (Inside IR35/Umbrella or PAYE only)
- The role is initially a 6 month contract with scope to roll
- Hybrid - Based in London (3 days a week in the office/ 2 days a week at home)
Can be based in London or Newcastle
The role is more on the operational side rather than architecture and build
Strong networks exp
- Cisco Meraki (Not essential, but would be good)
- Scripting
- Monitoring platforms
- 4scout for NAC
- Checkpoint (Essential) - Own Checkpoint, need solid understanding of how it works
- Solarwinds
- Infoblox for IP
- Firewalls, rules changing lots (only do after approval from Security Team)
- Networks used by 3rd parties, lots of changes here
- MPLS, connectivity to Azure (need this ideally)
About this Opportunity:
The Network team is part of our Infrastructure function and is primarily focussed on delivering network services to our approx. 2300 users that are working remotely across the UK and Ireland as well as core network services over which we provide access to client facing applications. In addition, the Network team also provides operational support for several Security controls.
An excellent opportunity has arisen for an experienced Network Engineer to join the team on a 6 month contract, with potential of extension, based in any UK office location (London, Bristol, Newcastle, Manchester Edinburgh). The role will suit an Engineer who enjoys working with a diverse range of technologies. Previous experience carrying out of being involved in network wide transformation would be desirable.
Important to this role is experience with Azure networking managing VNETs, ExpressRoute, VPNs and other Azure network features such as NSG/MS loadbalancer.
Whilst, the primary focus of the role will be to provide day to day support for our existing network services, this is an all encompassing role and there are multiple projects across traditional on-premise network services, cloud and security services which the successful candidate will have a strong involvement in.
Responsibilities Include:
- Proactively managing our Access network (e.g. WAN and LAN services), External network (e.g. internet connectivity and third-party services) and our Core network (covering data centre and cloud services). Including incident, problem and change management to ensure maximum service availability and minimal risk.
- Advising on and delivering project and BAU related network changes, such as firewall changes.
- Proactively managing security controls, including Proxy.
- Identify and drive improvements to support the way we deliver network services, especially process automation.
- Ensure network related artefacts such as documentation and diagrams are kept up to date.
- Managing relationships with third party support and service providers
- Occasional out of hours work will be necessary.
Technical Skills:
- 5+ years' experience of working in a complex, multi-site network environment where Security is a core.
- In-Depth understanding of networking fundamentals including: Network topology, Data Centre Infrastructure systems, Layer 2/Layer 3 Switching, VLANs, Routing, VPNs, High availability protocols.
- Strong Check Point firewall and Azure skills/experience.
- Demonstrable hands-on experience with Meraki Switches and wireless infrastructure, Arista software, Forcepoint Proxy, Citrix NetScaler, and Forescout CounterACT.
- Automation experience using scripting languages (e.g. Python, Windows PowerShell)
- Knowledge of Microsoft Windows and Linux operating systems.
Qualifications:
General or vendor-specific IT security qualifications would be beneficial, such as Cisco CCNA/CCNP, Checkpoint CCSA, but relevant experience/knowledge is most important.