Network and Infrastructure Security Consultant - Outside IR35

ZipRecruiter; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading company in the UK is seeking a skilled security architect to design and implement secure network architectures across cloud and hybrid environments. The role requires expertise in Azure security controls, Active Directory, and enterprise firewalls. You will provide technical leadership and collaborate with teams to integrate security into network platforms. This is an exciting opportunity for professionals passionate about infrastructure security.

Qualifications

• Extensive experience in infrastructure/network security roles.
• Strong hands-on experience with Active Directory and Azure AD security best practices.

Responsibilities

• Design and implement secure network architectures for cloud and hybrid environments.
• Conduct security assessments and hardening of Active Directory and Azure AD.

Skills

infrastructure/network

Microsoft Azure security controls

Active Directory

VMware vSphere/ESXi

enterprise firewalls

segmentation

Job description

Job Description

Role

• Design and implement secure network architectures for cloud (Azure), on-prem and hybrid environments.
• Conduct security assessments and hardening of Active Directory (AD), Azure AD, VMware ESXi and virtual machine infrastructure.
• Evaluate, deploy and manage enterprise firewalls (e.g. Palo Alto, Fortinet, Cisco, Azure Firewall).
• Collaborate with infrastructure and operations teams to integrate security into network, and virtualisation platforms.
• Support segmentation strategies and zero trust network designs.
• Provide technical leadership for secure deployments in Azure, including NSGs, ASGs, UDRs and firewall policies.

Skills

• Extensive experience in infrastructure/network security roles.
• Expertise in Microsoft Azure security controls (Azure Firewall, NSG, ASG etc.).
• Strong hands-on experience with Active Directory and Azure AD security best practices.
• In-depth knowledge of VMware vSphere/ESXi environments and hardening techniques.
• Proven experience with enterprise firewalls (e.g. Palo Alto, Fortinet, Check Point, Cisco ASA).
• Familiarity with segmentation, VPNs, IPsec tunnels and secure connectivity models.