Network Engineer

Charles Russell Speechlys; City of Westminster; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading legal firm in the City of Westminster is seeking an experienced Network Engineer to manage their LAN/WAN infrastructure. The role involves designing and implementing complex networks using Cisco technologies, ensuring security with Palo Alto solutions, and offering technical support. Candidates should possess 5+ years' experience, strong analytical skills, and communication abilities. This position offers a hybrid working arrangement, allowing flexibility in the workplace.

Qualifications

• 5+ years of experience in network engineering or support roles.
• Strong understanding of Layer 2/3 technologies and routing protocols.
• Proven experience with network security protocols such as RADIUS and TACACS+.

Responsibilities

• Design and manage complex network infrastructures.
• Monitor network performance and troubleshoot issues.
• Develop and enforce network security policies and standards.

Skills

Cisco ISE expertise

Network troubleshooting

Palo Alto firewall configuration

Cisco Wireless LAN knowledge

Analytical problem-solving

Communication skills

Education

Relevant Azure and Cisco qualifications

Fortinet certifications (NSE 4, NSE 5 or higher)

Tools

Cisco Catalyst switches

FortiGate Firewalls

Palo Alto firewalls

Job description

Overview

Reporting directly to the Infrastructure Platforms Manager, the Network Engineer will be responsible for maintaining the existing LAN/WAN infrastructure as well as working on projects to maintain our LAN/WAN and Office Moves and Changes.

Responsibilities

• Design, implement, and manage complex network infrastructure using Cisco Campus Networking 9300 series and Cisco Nexus switches.
• Configure, deploy, and maintain Palo Alto Prisma Access firewall policies to ensure secure access to critical applications and data.
• Administer and configure FortiGate Firewalls for advanced security measures and threat management.
• Monitor network performance, identify issues, and perform necessary troubleshooting to maintain optimal network health.
• Develop and enforce network security policies, procedures, and standards to protect organisational assets.
• Collaborate with IT and security teams to assess and mitigate security risks and vulnerabilities.
• Provide advanced technical support
• Escalate issues / manage changes with necessary 3rd party managed service providers.
• Stay current with industry trends and emerging technologies to ensure the network infrastructure remains robust and up-to-date.
• Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles.
• Proven experience in supporting network security functions primarily focusing on Cisco ISE.
• This role requires expertise in Cisco ISE and a strong understanding of network security protocols.
• Configure and optimise ISE policies for authentication, authorisation, and accounting (AAA).
• Monitor and troubleshoot ISE-related issues to ensure optimal performance and security.
• Collaborate with network and security teams to integrate ISE with existing infrastructure.
• Develop and maintain documentation related to ISE configurations, policies, and procedures.
• Strong understanding of network security protocols, including RADIUS, TACACS+, and 802.1X.
• Cisco Wireless Controllers (Required)
• Strong understanding of wireless protocols, Cisco Wireless LAN configurations, and security principles.
• Maintaining, troubleshooting, and supporting Wireless LAN Controllers and associated WiFi networks.

General Skills & Qualifications

• In-depth knowledge of core network fundamentals including Layer 2/3 technologies, routing protocols such as BGP and OSPF and network troubleshooting.
• Proven experience with Cisco's range of products including Catalyst and Nexus switches.
• Working knowledge of Palo Alto firewalls, Prisma Access and SD-WAN in general will be highly desirable.
• Relevant Azure and Cisco qualifications
• 5 years plus experience
• HLD / LLD Documentation skills
• ITIL
• Knowledge of the Microsoft Azure cloud stack, Proven experience as a network engineer or support engineer with a focus on Fortinet products.
• Provide technical support and troubleshooting for Fortinet products, including FortiGate, FortiAnalyzer, FortiManager, and other related solutions.
• Assist with the configuration, deployment, and maintenance of Fortinet and Cisco devices.
• Fortinet certifications such as NSE 4, NSE 5, or higher are highly desirable.

Person specification

• A logical approach to problem-solving and demonstrating analytical capabilities
• The ability to work well under pressure
• An enthusiastic approach to work and self-learning
• Attention to detail and a focus on process
• Good communication skills, including the ability to convey information concisely to those who may have no background in technology
• Self-starter

Work Arrangement

Hybrid working - We adopt a hybrid and flexible working approach, dependent on the requirements of the role and subject to manager approval.