Network Security Engineer On Site

ITC Secure; City Of London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

Pension scheme

Private health insurance

Cycle to work

Job summary

ITC Secure is seeking a Network Security Engineer to join our 24x7 NOC in a hybrid role based in Central London. You will configure devices, manage firewalls and security policies, and sustain highly secure networks for a major financial services client.

Ideal candidates have L2/L3 support experience, strong English communication, and ITIL familiarity. The role requires occasional after-hours work and close collaboration with customer and ITC teams.

Qualifications

• Demonstrable competence in L2/L3 network support.
• Fluent written and spoken English.
• ITIL processes, incident and change management familiarity.

Responsibilities

• Create/modify device configurations for switching/routing and firewall policies.
• Manage and troubleshoot highly secure networks for a financial services customer.
• Provide customer-facing reporting and incident escalation support.

Skills

L2/L3 support

English communication

Education

Cisco CCNP Enterprise

Fortinet NSE4

ITIL Foundation

Tools

SolarWinds

Jira

SharePoint

Job description

Reports to:

Head of NOC

Job purpose:

Working as part of a team of experienced Network Security Engineers, including our 24x7 NOC this role will provide dedicated support for the customer. The role, alongside side another Network Security Engineer will, on a day to day basis report directly to the customer. The role will monitor, manage and support highly secure, complex network environments for our financial services customer, a global bank with offices in Central London.

Key interfaces:

Internal network and security teams within the Customer, ITC NOC Manager, Service Manager / Account Management, Network Security Engineers (both within the Customer and the ITC NOC), SOC Analysts and Vendors.

The role will involve:

• Creating/modifying device configurations across switching and routing products,
• Creating/modifying firewall configurations and policies for different vendors (Cisco, Fortinet, Palo Alto, etc)
• Working knowledge of Fortigate Firewalls, Cisco FTD, Cisco ACI, Cisco Nexus and Catalyst switches, Cisco ISE NAC, Cisco Wireless, Palo Alto Firewalls, F5 BigIP server load balancers, dynamic routing protocols and best practice device configuration,
• Experience working with network management platforms (SolarWinds)
• Excellent troubleshooting skills, with prior experience working as an escalation engineer managing high-priority incidents. You will need to be able to work well under pressure and with a calm demeanour,
• Ability to consistently deliver to deadlines while prioritising competing demands for time,
• Ability to understand and follow ITIL processes, notably incident and change management - raising changes and seeking approval, joining CAB calls, coordination of testers,
• Willingness to share information, improve documentation, and train other engineers,
• Able to meet demands for occasional out-of-hours working and on-call escalation, performing out of hours changes across the network - post 6pm Friday & Weekends,
• Customer-facing with good report-writing skills and strong communication skills at all levels,
• Completing daily health checks on the network,
• Working internally within the Customer, supporting internal teams on BAU projects,
• Working between the Customer and ITC NOC ensuring any incidents, changes, service requests are responded to in a timely manner,
• Working knowledge of ITSM tooling, specifically Jira, SharePoint,
• Updates to design documentation, Visio and SolarWinds maps,
• Duty of care, working as part of a team, supporting other engineers and the customer.

We are looking for someone with:

• The below certifications or equivalent work-related experience
  • Cisco CCNP Enterprise (essential)
  • Cisco CCNP Security (desirable)
  • Fortinet Certified Professional - NSE 4 (essential)
  • Implementing Cisco Application Centric Infrastructure (desirable)
  • Palo Alto Networks Next-Generation Firewall Engineer (desirable)
  • Experience with automation tooling - Ansible, Catalyst Centre, etc (desirable)
  • Riverbed Certified Solutions Associate certification (desirable)
  • ITIL Foundation (desirable)
• The ability to communicate fluently and confidently to a high standard in both written and verbal English (essential)
• Demonstrable competence and capability in a L2 & L3 network support role (essential)
• Confident working knowledge of Cisco FTDs and ACI, Palo Alto, VPNs, Fortinet, routing and switching administration via GUI & CLI (essential)
• Experience in Four or more of the following areas, ideally at a support level (essential)
  • Firewall Management: Cisco FTD and Palo Alto, Fortinet Fortigate
  • Cisco ACI; Nexus and Catalyst Switches and Cisco IOS Routers
  • Cisco Identity Services Engine - ISE (Tacacs, Network Access Control)
  • Load Balancing: F5,
  • Riverbed Steelhead
  • Monitoring: SolarWinds
  • Wireless Lan Controllers: Cisco
  • Complex Natting
• Experience with market data / trader platforms / cloud (essential)
  • Raising/chasing issues with market-data leased lines and provider networks
  • Supporting connectivity issues for multiple trader platforms
  • Cloud connectivity: Azure, AWS, GCP, OCI (Oracle Cloud) knowledge of VPCs etc
  • Multicast support and troubleshooting
• Ability to cope successfully under pressure and with shifting priorities

Working hours:

Normal working hours are 8 hours per day Monday to Friday between the hours of 07:00 - 16:00 and 09:00 - 18:00.

Working location:

This is a hybrid-based role with 2 days a week on-site at the customers offices in Central London. The role involves out of hours support paid as overtime for activities such as the deployment of changes escalation during major incidents.

Travel:

Occasional travel may be required depending on project work undertaken.

Benefits:

• 25 days annual leave.
• Pension scheme.
• Private health insurance.
• Enhanced maternity and paternity leave.
• Death-in-service life cover.
• Shopping discounts.
• Cycle to work scheme.
• Season ticket/gym loans.
• Online wellbeing centre.

This job description is intended to convey information essential to understanding the scope of the role and it is not intended to be an exhaustive list of skills, efforts, duties, responsibilities or working conditions associated with the position.