Infrastructure Engineer - Firewall & Security - salary £46,160 p.a. + digital allowance + benefits

Medicines and Healthcare products Regulatory Agency; Hereford; Hybrid; GBP 47,000; Full time

Job summary

A UK regulatory body is seeking an Infrastructure Engineer specializing in firewalls and security. This full-time role involves managing network projects, ensuring infrastructure stability, and collaborating across teams. Candidates must fulfill UK immigration and security checks. Competitive salary with benefits including annual leave and a pension scheme.

Benefits

Digital Allowance

Annual leave (25 days)

Civil Service pension scheme

Qualifications

• Candidates must meet UK immigration and nationality requirements.
• Must pass security and criminal record checks.

Responsibilities

• Manage and deliver network projects and support tasks.
• Lead execution of core network projects aligned with IT strategy.
• Collaborate with various teams to ensure strategy alignment.

Skills

Cisco FTD firewalls

Cisco ISE

Network security protocols

OSFP, VLAN, VLSM configurations

Tools

Cisco FMC

Job description

Overview

We are currently looking for an Infrastructure Engineer – Firewall & Security to join our Technology Service & Operations function within the Digital & Technology group. The Technology & Service Operations function is responsible for managing the existing IT infrastructure including software and hardware, databases, and other technology platforms; leading the support and maintenance of applications; development and testing of new applications and platforms; and cyber and information security for the Agency.

What’s the role?

The Network Core Engineer will play a key role in managing and delivering network projects and BAU tasks, with a particular focus on critical areas such as the network core, data centres, and related infrastructure. This role is vital in ensuring the stability, performance, and security of the core network as the MHRA undergoes a significant overhaul of its IT infrastructure, including the deployment of new equipment in these critical areas. The successful candidate will provide advanced expertise in core network technologies, working closely with both senior and junior engineers to ensure smooth operations and continuous improvement. You will act as an escalation point for more complex issues related to the network core and data‑centre environments, providing guidance and troubleshooting support to junior engineers when necessary. The role also involves collaborating with other teams to align core network initiatives with the overall IT strategy. This is a hands‑on technical role where you will be expected to interact daily with core IT Infrastructure technologies and be able to configure, manage and diagnose the IT Infrastructure components detailed in this advert.

Technical Skills and Systems

• Deploy, manage and configure Cisco FTD firewalls via FMC in redundant configurations.
• Manage and configure Cisco ISE.
• Understand least‑privilege concepts and secure internet‑connected firewalls.
• Run firewalls as a core and (optional) support micro‑segmentation of services from virtual platforms using FTD/FMC technologies.
• Manage and deploy advanced FMC configurations such as OSFP, VLAN and VLSM in firewalls, NAT/PAT/S‑NAT, Site‑to‑Site VPNs, ACLs and DACLs.

Leadership and Escalation

• Lead and manage the successful execution of core network projects, ensuring they are delivered on time, within scope, and aligned with the MHRA’s IT strategy.
• Serve as the main escalation point for junior network engineers, providing advanced troubleshooting and technical expertise in resolving complex core network and data‑centre issues, ensuring high‑quality resolutions that prevent future incidents.
• Mentor and support junior engineers, fostering a collaborative environment and encouraging skills development across the team.

Core Network Stability, Security and Performance

• Implement and maintain robust security protocols to safeguard core network infrastructure, ensuring compliance with security policies and regulatory requirements.
• Proactively monitor and assess core network performance, identifying potential risks or weaknesses and applying pre‑emptive solutions to minimise downtime and service disruptions.
• Play a pivotal role in the agency's ongoing IT infrastructure overhaul by recommending, testing, and integrating cutting‑edge core network technologies.

Collaboration and Stakeholder Management

• Collaborate closely with the Lead Network Architect, project teams, and other IT functions to ensure that core network strategies are fully aligned with the overall IT infrastructure roadmap and broader organisational goals.
• Establish and maintain productive relationships with external vendors, ensuring their services and products meet the agency's performance, security and contractual expectations.
• Engage with senior stakeholders and cross‑functional teams to communicate project progress, core network performance, and ensure that business requirements are consistently met.

Qualifications and Requirements

Candidates must meet UK immigration requirements as well as Civil Service nationality rules. Successful candidates must pass a disclosure and barring security check, animal rights and pro‑life activism checks, and a criminal record check. People working with government assets must complete baseline personnel security standard checks.

Remuneration and Working Arrangements

Salary: £46,160 per annum. The role is a full‑time, permanent position based in 10 South Colonnade, Canary Wharf London, E14 4PU or South Mimms, Hertfordshire. Flexible, hybrid working is implemented with a minimum of eight on‑site days per month, potentially up to twelve days. The role will also participate in the Agency’s out‑of‑hours on‑call rota on a periodic basis, with an on‑call payment added to the salary.

A Digital Allowance of up to £12,823 per annum may be available for exceptional candidates. Benefits include annual leave (25 days on entry, rising to a maximum of 30 days), 8 bank holidays, privilege leave, 37‑hour work week, occupational sick pay, mobility clause, Civil Service pension scheme, flexible working, interest‑free season ticket loan, employee assistance services, and access to the Civil Service Benevolent Fund.