Network Security Engineer On Site

ITC Secure; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Pension scheme

Private health insurance

Enhanced maternity/paternity leave

Death-in-service life cover

Shopping discounts

Cycle to work scheme

Season ticket/gym loans

Online wellbeing centre

Job summary

ITC Secure is seeking an experienced Network Security Engineer to join our 24x7 NOC in Central London. You will work alongside another engineer to monitor and support a highly secure, global bank’s network, coordinating with internal and customer teams and performing out-of-hours changes as needed.

Responsibilities include configuring devices (Cisco/Fortinet/Palo Alto), firewall policies, and network services using SolarWinds, Jira, and SharePoint.

Qualifications

• Essential CCNP Enterprise
• Essential Fortinet NSE 4
• L2/L3 network support experience
• Strong English written and verbal communication

Responsibilities

• Create/modify device configurations across switching and routing
• Configure firewall policies for Cisco, Fortinet, Palo Alto, etc.
• Work with Fortigate, Cisco FTD, ACI, Nexus, Catalyst, ISE, Wireless, F5, and related devices
• Troubleshoot and manage incidents with high priority under ITIL processes
• Perform out-of-hours changes and on-call escalation when required
• Maintain health checks and document changes with SIEM/ITSM tools

Skills

English fluency

L2/L3 network support

Report writing

Communication

Ability to work under pressure

Education

Cisco CCNP Enterprise

Fortinet NSE 4

Cisco CCNP Security

Palo Alto NGFW cert

ITIL Foundation

Riverbed CSA

Pxe Implementing ITIL

Tools

SolarWinds

Jira

SharePoint

Visio

Cisco IOS

Fortigate

Cisco FTD

Palo Alto

F5 BigIP

NAC ISE

Job description

Reports to: Head of NOC

Job purpose: Working as part of a team of experienced Network Security Engineers, including our 24x7 NOC this role will provide dedicated support for the customer. The role, alongside side another Network Security Engineer will, on a day to day basis report directly to the customer. The role will monitor, manage and support highly secure, complex network environments for our financial services customer, a global bank with offices in Central London.

Key interfaces: Internal network and security teams within the Customer, ITC NOC Manager, Service Manager / Account Management, Network Security Engineers (both within the Customer and the ITC NOC), SOC Analysts and Vendors.

The role will involve:

• Creating/modifying device configurations across switching and routing products,
• Creating/modifying firewall configurations and policies for different vendors (Cisco, Fortinet, Palo Alto, etc)
• Working knowledge of Fortigate Firewalls, Cisco FTD, Cisco ACI, Cisco Nexus and Catalyst switches, Cisco ISE NAC, Cisco Wireless, Palo Alto Firewalls, F5 BigIP server load balancers, dynamic routing protocols and best practice device configuration,
• Experience working with network management platforms (SolarWinds)
• Excellent troubleshooting skills, with prior experience working as an escalation engineer managing high-priority incidents. You will need to be able to work well under pressure and with a calm demeanour,
• Ability to consistently deliver to deadlines while prioritising competing demands for time,
• Ability to understand and follow ITIL processes, notably incident and change management – raising changes and seeking approval, joining CAB calls, coordination of testers,
• Willingness to share information, improve documentation, and train other engineers,
• Able to meet demands for occasional out-of-hours working and on-call escalation, performing out of hours changes across the network – post 6pm Friday & Weekends,
• Customer-facing with good report-writing skills and strong communication skills at all levels,
• Completing daily health checks on the network,
• Working internally within the Customer, supporting internal teams on BAU projects,
• Working between the Customer and ITC NOC ensuring any incidents, changes, service requests are responded to in a timely manner,
• Working knowledge of ITSM tooling, specifically Jira, SharePoint,
• Updates to design documentation, Visio and SolarWinds maps,
• Duty of care, working as part of a team, supporting other engineers and the customer.

We are looking for someone with:

• The below certifications or equivalent work-related experience
  • Cisco CCNP Enterprise (essential)
  • Cisco CCNP Security (desirable)
  • Fortinet Certified Professional - NSE 4 (essential)
  • Implementing Cisco Application Centric Infrastructure (desirable)
  • Palo Alto Networks Next-Generation Firewall Engineer (desirable)
  • Experience with automation tooling - Ansible, Catalyst Centre, etc (desirable)
  • Riverbed Certified Solutions Associate certification (desirable)
  • ITIL Foundation (desirable)
• The ability to communicate fluently and confidently to a high standard in both written and verbal English (essential)
• Demonstrable competence and capability in a L2 & L3 network support role (essential)
• Confident working knowledge of Cisco FTDs and ACI, Palo Alto, VPNs, Fortinet, routing and switching administration via GUI & CLI (essential)
• Experience in Four or more of the following areas, ideally at a support level (essential)
  • Firewall Management: Cisco FTD and Palo Alto, Fortinet Fortigate
  • Cisco ACI; Nexus and Catalyst Switches and Cisco IOS Routers
  • Cisco Identity Services Engine - ISE (Tacacs, Network Access Control)
  • Load Balancing: F5,
  • Riverbed Steelhead
  • Monitoring: SolarWinds
  • Wireless Lan Controllers: Cisco
  • Complex Natting
• Experience with market data / trader platforms / cloud (essential)
  • Raising/chasing issues with market-data leased lines and provider networks
  • Supporting connectivity issues for multiple trader platforms
  • Cloud connectivity: Azure, AWS, GCP, OCI (Oracle Cloud) knowledge of VPCs etc
  • Multicast support and troubleshooting
• Ability to cope successfully under pressure and with shifting priorities

Working hours: Normal working hours are 8 hours per day Monday to Friday between the hours of 07:00 - 16:00 and 09:00 - 18:00.

Working location: This is a hybrid-based role with 2 days a week on-site at the customers offices in Central London. The role involves out of hours support paid as overtime for activities such as the deployment of changes escalation during major incidents.

Travel: Occasional travel may be required depending on project work undertaken.

Benefits:

• 25 days annual leave.
• Pension scheme.
• Private health insurance.
• Enhanced maternity and paternity leave.
• Death-in-service life cover.
• Shopping discounts.
• Cycle to work scheme.
• Season ticket/gym loans.
• Online wellbeing centre.

This job description is intended to convey information essential to understanding the scope of the role and it is not intended to be an exhaustive list of skills, efforts, duties, responsibilities or working conditions associated with the position.