Network Engineer

Charles Russell Speechlys LLP; City Of London; Hybrid; GBP 45,000 - 60,000; Full time

Job summary

A global law firm based in London is seeking a Network Engineer to manage and maintain their LAN/WAN infrastructure. Responsibilities include designing complex network solutions, configuring security policies, and ensuring optimal network performance. The ideal candidate possesses over 5 years of experience and strong knowledge of Cisco products and Palo Alto firewalls. The role offers a hybrid working approach depending on task requirements.

Qualifications

• 5+ years of experience in network engineering.
• Strong understanding of wireless protocols and Cisco Wireless LAN configurations.
• Excellent problem-solving and analytical skills.

Responsibilities

• Design and manage network infrastructure.
• Configure and manage security policies and firewall settings.
• Monitor network performance and troubleshoot issues.

Skills

Cisco products knowledge

Network troubleshooting

Knowledge of Cisco ISE

In-depth knowledge of network fundamentals

Palo Alto firewall experience

Microsoft Azure knowledge

Education

Relevant Azure and Cisco qualifications

Tools

Cisco Catalyst 9300

Cisco Nexus switches

Palo Alto firewalls

FortiGate firewalls

Job description

Reporting directly to the Infrastructure Platforms Manager, the Network Engineer will be responsible for maintaining the existing LAN/WAN infrastructure as well as working on projects to maintain our LAN/WAN and Office Moves and Changes.

Roles and Responsibilities

• Design, implement, and manage complex network infrastructure using Cisco Campus Networking 9300 series and Cisco Nexus switches.
• Configure, deploy, and maintain Palo Alto Prisma Access firewall policies to ensure secure access to critical applications and data.
• Administer and configure FortiGate Firewalls for advanced security measures and threat management.
• Monitor network performance, identify issues, and perform necessary troubleshooting to maintain optimal network health.
• Develop and enforce network security policies, procedures, and standards to protect organisational assets.
• Collaborate with IT and security teams to assess and mitigate security risks and vulnerabilities.
• Provide advanced technical support.
• Escalate issues / manage changes with necessary 3rd party managed service providers.
• Stay current with industry trends and emerging technologies to ensure the network infrastructure remains robust and up-to-date.
• Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles.

Skills and Experience

• In-depth knowledge of core network fundamentals including Layer 2/3 technologies, routing protocols such as BGP and OSPF and network troubleshooting.
• Proven experience with Cisco’s range of products including Catalyst and Nexus switches.
• Working knowledge of Palo Alto firewalls, Prisma Access and SD-WAN in general will be highly desirable.
• Relevant Azure and Cisco qualifications.
• 5 years plus experience.
• HLD / LLD Documentation skills.
• ITIL.
• Knowledge of the Microsoft Azure cloud stack.

Cisco ISE (Required)

• Proven experience in supporting network security functions primarily focussing on Cisco ISE.
• Configure and optimise ISE policies for authentication, authorisation, and accounting (AAA).
• Monitor and troubleshoot ISE-related issues to ensure optimal performance and security.
• Collaborate with network and security teams to integrate ISE with existing infrastructure.
• Develop and maintain documentation related to ISE configurations, policies, and procedures.
• Strong understanding of network security protocols, including RADIUS, TACACS+, and 802.1X.

Cisco Wireless Controllers (Required)

• Strong understanding of wireless protocols, Cisco Wireless LAN configurations, and security principles.
• Maintaining, troubleshooting, and supporting Wireless LAN Controllers and associated Wi-Fi networks.

FortiGate (Desirable)

• Proven experience as a network engineer or support engineer with a focus on Fortinet products.
• Provide technical support and troubleshooting for Fortinet products, including FortiGate, FortiAnalyzer, FortiManager, and other related solutions.
• Assist with the configuration, deployment, and maintenance of Fortinet and Cisco devices.
• Fortinet certifications such as NSE 4, NSE 5, or higher are highly desirable.

Person Specification

• A logical approach to problem-solving and demonstrating analytical capabilities.
• The ability to work well under pressure.
• An enthusiastic approach to work and self-learning.
• Attention to detail and a focus on process.
• Good communication skills, including the ability to convey information concisely to those who may have no background in technology.
• Self-starter.

We adopt a hybrid working approach, dependent on the requirements of the role and subject to manager approval.