Network security engineer in financial services

OpticoreIT; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Opticore IT is seeking a Senior Network Security Engineer in London to design and implement firewall policies using Cisco Firepower and FortiGate. You will lead rule design standards, performAlgoSec analysis, and coordinate with client CAB processes.

You will validate Ivanti workflows, review Elastic logs, and craft change packs with rollback plans, addressing complex security architectures in finance and telecom sectors.

Qualifications

• Experience with Cisco Firepower (FMC/FTD) and FortiGate policy engineering.
• Strong knowledge of large-scale rule cleanup and AlgoSec analysis.
• Ability to analyze traffic flows and design resilient firewall policies.

Responsibilities

• Author the Rule Design Standard for Cisco FTD and FortiGate, with metadata and design examples.
• Specify the Ivanti firewall request catalogue item workflow for client configuration.
• Validate access, tooling and Elastic log coverage across all in-scope devices.
• Review AlgoSec Firewall Analyzer baseline, rank risks and present baseline measures.
• Produce change packs with rollback plans and implement them out of hours under CAB.
• Analyze observed flows in Elastic to design explicit service rules replacing wide rules.
• Confirm resilient and failover paths before rules are unused and monitor with rollback window.

Skills

Cisco Firepower

FortiGate

Policy Engineering

AlgoSec Analysis

Tools

Ivanti

Elastic

Job description

Описание: Opticore IT is a specialist Network Engineer and Project Management consultancy offering a wide variety of opportunities to work within fast-paced, challenging environments across our client base spanning multiple sectors including Finance, Broadcast Media, Telecommunications and more. Opticore IT are currently searching for a Senior Network Security Engineer with a strength in both Cisco Firepower and FortiGate to join the team.

Задачи

• Author the Rule Design Standard for Cisco FTD and FortiGate, covering naming, structure, permitted and prohibited constructs, mandatory metadata and the definition of a wide rule Design and own the vendor neutral rule schema (v1 and v2), with worked examples for both platforms, forming the Policy as Code data model
• Specify the fields, validation and workflow of the Ivanti firewall request catalogue item ready for client configuration.
• Validate access, tooling and Elastic log coverage across all in-scope devices (2x FMC, 10x FTD, 8x FortiGate)
• Technically review the AlgoSec Firewall Analyzer baseline, risk rank findings and present baseline measures to client engineering
• Carry out dependency analysis of rules with no attributable owner before they are routed to risk acceptance
• Produce change packs with rollback plans to remove unused, shadowed, redundant and expired rules, and implement them out of hours under the client's CAB
• Analyse observed flows in Elastic, including month end and quarter end traffic, to design explicit service rules that replace wide and overly permissive rules
• Confirm resilient and failover paths before any rule is judged unused, then monitor hit counts, disable with a rollback window and remove the original rule
• Define how DC Refresh replacement firewalls are brought into the standard and schema from day one
• Produce the Firewall Policy as Code high-level design, covering architecture, validation pipeline and integration with Ivanti, change control and AlgoSec.

Требования

• Cisco Firepower (FMC/FTD) & FortiGate Policy Engineering
• Large Scale Rule Base Clean-up & AlgoSec Analysis
• Traffic Flow Analysis & Resilient Design
• Change Pack Authoring & CAB Implementation
• Technical Standards Authorship in Financial Services

Условия

• initial 4-month contract (inside IR35) with scope to extend
• This opportunity will require 2 days per week in the office in Central London.