Network Firewall Services Infrastructure Engineer

NatWest Group; Greater London; On-site; GBP 65,000 - 110,000; Full time

Job summary

NatWest Group is seeking a Network Firewall Services Infrastructure Engineer to design and support enterprise firewall and network security services across public and private clouds. The role involves collaborating with product owners to shape roadmaps, manage lifecycle, and apply automation for testing and live deployment.

You will lead on Fortinet technologies, ensure compliance with bank requirements, and contribute to security best practices and CI/CD pipelines for security infrastructure.

Qualifications

• Experience in network security engineering and firewall administration.
• Strong understanding of firewall architectures and enterprise operational processes.
• Automation scripting using Python, Ansible or Shell scripting.
• Experience with Fortinet products (FortiGate, FortiManager, FortiAnalyzer).
• Knowledge of IPsec VPNs, SSL VPNs, SD-WAN and routing protocols (BGP/OSPF).

Responsibilities

• Design, deploy and maintain Fortinet security solutions across enterprise environments.
• Manage firewall policies, NAT configurations, VPN services and security profiles.
• Collaborate with product owners to create roadmaps and manage lifecycle of security services.
• Provide operational support for firewall and security incidents and requests.
• Contribute to Infrastructure as Code and automation initiatives for provisioning and compliance.
• Support security audits and regulatory compliance requirements.

Skills

Network security engineering

Firewall administration

Automation scripting

Security architectures

Agile working

Tools

FortiGate

FortiManager

FortiAnalyzer

Ansible

Job description

Join us as a Network Firewall Services Infrastructure Engineer

• Join us and collaborate in building the best possible network security platforms for public and private cloud environments
• Improve our products as you apply automation to provide testing and a route to live
• This is your chance to share thought leadership and best practice across the bank, while you’re developing solutions

What you'll do

As a Network Firewall Infrastructure Engineer, you’ll take the lead on designing and supporting enterprise firewall and network security services that make all the difference to our customers, as well as our strategic targets. This is a fantastic opportunity to advance your career in a highly innovative and supportive environment.

You’ll collaborate with product owners to create roadmaps and manage the lifecycle of network security services, considering customer feedback, operational requirements, emerging threats and production issues. As you continue to manage the selection, implementation and maintenance of Fortinet technologies, you’ll ensure that our solutions comply with the bank’s requirements and responsibilities.

You’ll also:

• Design, deploy and maintain Fortinet security solutions including FortiGate (FGT), FortiManager (FMG) and FortiAnalyzer (FAZ)
• Manage firewall policies, NAT configurations, VPN services and security profiles across enterprise environments
• Identify new ways to solve security challenges and enhance platform performance using modern security tooling
• Provide operational support for firewall and network security-related incidents and service requests
• Contribute to Infrastructure as Code and automation initiatives for firewall provisioning, policy management and compliance controls
• Build awareness of security best practices, design patterns and automation capabilities across the bank
• Work with key stakeholders to ensure secure and resilient service delivery
• Support security audits, vulnerability remediation activities and regulatory compliance requirements
• Perform security policy reviews, rule-base optimisation and firewall lifecycle management

The skills you'll need

To thrive in this role, you'll have experience in network security engineering, firewall administration and automation scripting using technologies such as Python, Ansible or Shell scripting. You'll possess a strong understanding of network security principles, firewall architectures and enterprise operational processes. You’ll also have strong hands‑on experience administering and supporting FGT firewalls in large enterprise environments, along with experience managing FMG for centralised policy administration, device management and configuration compliance.

You’ll also need experience using FAZ for logging, reporting, security analytics and operational troubleshooting, along with knowledge of Fortinet Security Fabric architecture and integrated security solutions and experience configuring and supporting IPSEC VPNs, SSL VPNs, SD-WAN and dynamic routing protocols including BGP and OSPF.

We’ll expect you to bring a good understanding of Agile working practices and toolsets, with the ability to create the vision and roadmap for security platforms and services. Relevant Fortinet certifications such as NSE 4, NSE 5, NSE 7, FCSS or equivalent certifications would be advantageous

In addition, you’ll have:

• Experience implementing security policies, intrusion prevention, web filtering, application control and threat protection services
• Knowledge of network protocols including TCP/IP, DNS, DHCP and load balancing concepts
• Experience with firewall automation, Infrastructure as Code and configuration management tooling, and experience developing CI/CD pipelines and automated deployment processes for network and security infrastructure
• Experience using monitoring, observability and security analytics tools to continuously improve services
• Understanding of cloud networking and security principles across AWS and hybrid cloud environments and strong troubleshooting, analytical and problem-solving skills
• Experience supporting highly available and resilient network security platforms
• Strong collaborative and communication skills, with the ability to clearly articulate technical concepts to both technical and non-technical stakeholder