Network Security Engineer

HCLTech; Greater London; Hybrid; GBP 30,000 - 50,000; Full time

Benefits offered by this job

Hybrid schedule

Fixed-term contract

Job summary

HCLTech London is seeking an experienced Network Security Engineer to design and implement Zero Trust security solutions and scalable enterprise networks. You will work with Security, IAM, Cloud, and Networking teams to deliver secure architectures and migration plans.

You will provide technical assessments, architecture reviews, PoCs, and detailed design documentation while leveraging Palo Alto, Fortinet, and Cisco NGFW platforms. Hybrid role, 3 days in-office, fixed-term contract.

Qualifications

• We require 8+ years of experience in Network Security Engineering and Enterprise Networking.
• We require demonstrated experience designing and implementing SASE/SSE, ZTNA, network segmentation, identity-based access controls, and enterprise firewall architectures.
• We require a strong understanding of Zero Trust Architecture principles.
• We require the ability to produce technical assessments, architecture reviews, PoCs, migration strategies, and engineering documentation.
• We require strong troubleshooting and root cause analysis capabilities.
• We require excellent written and verbal communication skills.
• We prefer certifications in Palo Alto or Fortinet; CCNP/CCIE or CISSP are preferred.

Responsibilities

• We partner with internal stakeholders and vendors to evaluate, select, and implement Zero Trust security solutions.
• We design and engineer scalable, resilient, and secure enterprise network and security architectures.
• We collaborate across Network Engineering, Security Engineering, IAM, Cloud, EUC, and Operations teams to deliver security transformation initiatives.
• We develop High-Level Designs (HLD), Low-Level Designs (LLD), migration plans, and architecture documentation.
• We support PoCs, pilot deployments, and production rollouts.
• We lead technical assessments, architecture reviews, and engineering recommendations.
• We design, deploy, and operate Palo Alto, Fortinet, or Cisco NGFW platforms and their cloud management tools.
• We design and implement SASE/SSE solutions for enterprise-scale deployments.

Skills

Network security

Zero Trust architecture

SASE/SSE

ZTNA

firewall architectures

troubleshooting

communication skills

Education

CCNP Enterprise/Security

CCIE Enterprise Infrastructure/Security

CISSP

Tools

Tufin

Algosec

Palo Alto

Fortinet

Cisco NGFW

Job description

Salary: £30,000 - 50,000 per year

Requirements:

• We require 8+ years of experience in Network Security Engineering and Enterprise Networking.
• We require demonstrated experience designing and implementing SASE/SSE, ZTNA, network segmentation, identity-based access controls, and enterprise firewall architectures.
• We require a strong understanding of Zero Trust Architecture principles.
• We require the ability to produce technical assessments, architecture reviews, PoCs, migration strategies, and engineering documentation.
• We require strong troubleshooting and root cause analysis capabilities.
• We require excellent written and verbal communication skills.
• We prefer Palo Alto or Fortinet certifications.
• We prefer CCNP Enterprise/Security, CCIE Enterprise Infrastructure/Security, or CISSP.
• We prefer experience within large-scale financial services environments.
• We prefer knowledge of NIST Zero Trust Architecture, DORA, NIS2, and modern cybersecurity frameworks.

Responsibilities:

• We partner with internal stakeholders and technology vendors to evaluate, select, and implement Zero Trust security solutions.
• We design and engineer scalable, resilient, and secure enterprise network and security architectures.
• We collaborate across Network Engineering, Security Engineering, IAM, Cloud, EUC, and Operations teams to deliver security transformation initiatives.
• We contribute to technical strategy, standards, reference architectures, and design patterns.
• We deliver solutions tailored to internal business requirements, articulate design rationale, adapt solutions flexibly, and iterate designs when required.
• We develop High-Level Designs (HLD), Low-Level Designs (LLD), migration plans, operational procedures, and architecture documentation.
• We support vendor evaluations, Proofs of Concept (PoCs), pilot deployments, and production rollouts.
• We lead technical assessments, architecture reviews, root cause analysis, and engineering recommendations.
• We design, deploy, and operate Palo Alto, Fortinet, or Cisco NGFW platforms and their cloud management tools.
• We design and implement SASE/SSE solutions for enterprise-scale deployments.
• We implement centralized security management, policy governance, logging, monitoring, and reporting using vendor ecosystems or tools such as Tufin or Algosec.
• We design and implement on-premises Zero Trust Enforcement Points (NGFW).
• We develop segmentation and micro-segmentation strategies across data centres, campuses, cloud, and branch environments.
• We define secure traffic flows and trust boundaries.
• We support migration from traditional network-centric security models to Zero Trust architectures.
• We handle routers, switches, and LAN/WAN design and engineering.
• We work with VPN technologies, IPSec, TLS encryption, and NAC integration.
• We integrate network security solutions with Microsoft Entra ID, Active Directory, Cisco ISE/NAC platforms, EDR/XDR solutions, SIEM platforms, ServiceNow, and cloud platforms such as Azure, AWS, and GCP.

Technologies:

• AI
• AWS
• Active Directory
• Azure
• Cloud
• Cisco
• Firewall
• GCP
• IAM
• Support
• LAN
• Network
• Security
• ServiceNow
• VPN
• MPLS
• Nexus
• Spark

More:

We are a $13+ billion global technology company with more than 224,000 people across 60 countries, delivering capabilities in digital, engineering, cloud, and AI through a broad portfolio of technology services and products. We are a globally recognized leader in the Tech and IT industry, and we keep a startup mindset built on idea-first thinking and innovation. This role is for a Network Security Engineer/Network Consultant based in London, UK, with a hybrid schedule of 3 days working from the office. It is a fixed-term contract role.

last updated 38 week of 2026