Network and Infrastructure Security Consultant - Outside IR35

JR United Kingdom; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading company in London is seeking a skilled security architect to design and implement secure network architectures for cloud and hybrid environments. The role involves conducting security assessments, managing enterprise firewalls, and providing technical leadership for secure deployments in Azure. Ideal candidates will have extensive experience in infrastructure security and a strong understanding of Active Directory and VMware environments.

Qualifications

• Extensive experience in infrastructure/network security roles.
• Strong hands-on experience with Active Directory and Azure AD security best practices.

Responsibilities

• Design and implement secure network architectures for cloud and hybrid environments.
• Conduct security assessments and hardening of Active Directory and VMware ESXi.

Skills

Infrastructure Security

Active Directory Security

VMware Security

Firewall Management

VPN Knowledge

Job description

Role

• Design and implement secure network architectures for cloud (Azure), on-premises, and hybrid environments.
• Conduct security assessments and hardening of Active Directory (AD), Azure AD, VMware ESXi, and virtual machine infrastructure.
• Evaluate, deploy, and manage enterprise firewalls (e.g., Palo Alto, Fortinet, Cisco, Azure Firewall).
• Collaborate with infrastructure and operations teams to integrate security into network, identity, and virtualization platforms.
• Support segmentation strategies and zero-trust network designs.
• Provide technical leadership for secure deployments in Azure, including NSGs, ASGs, UDRs, and firewall policies.

Skills

• Extensive experience in infrastructure/network security roles.
• Strong hands-on experience with Active Directory and Azure AD security best practices.
• In-depth knowledge of VMware vSphere/ESXi environments and hardening techniques.
• Proven experience with enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point, Cisco ASA).
• Familiarity with segmentation, VPNs, IPsec tunnels, and secure connectivity models.