Principal Network Security Engineer

Elanco Animal Health Incorporated; Hook; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A global leader in animal health is seeking a Principal Network Security Engineer in Hook, UK, to design enterprise security architecture and oversee firewall and network security projects. Candidates should have over 5 years of experience, particularly with Palo Alto Networks, and be skilled in documentation and communication. This role offers opportunities for mentorship and has a hybrid work environment, providing a path for career growth in a dynamic team.

Qualifications

• 5+ years of experience in network security engineering and design.
• Hands-on experience with Palo Alto Networks firewalls.
• Strong documentation skills including diagramming and design creation.

Responsibilities

• Design and maintain enterprise security architecture.
• Oversee firewall and NAC security projects.
• Provide mentorship to junior engineers.

Skills

Next-generation firewalls

Network security engineering

Communication skills

Work organization

Routing protocols (OSPF)

Palo Alto Networks

Zero Trust principles

Tools

Palo Alto Panorama

Palo Alto Global Protect VPN

Cloud platforms (Azure or GCP)

Job description

Overview

At Elanco (NYSE: ELAN) - it all starts with animals! As a global leader in animal health, we are dedicated to innovation and delivering products and services to prevent and treat disease in farm animals and pets. At Elanco, we are driven by our vision of Food and Companionship Enriching Life and our purpose - all to Go Beyond for Animals, Customers, Society and Our People.

At Elanco, we pride ourselves on fostering a diverse and inclusive work environment. We believe that diversity is the driving force behind innovation, creativity, and overall business success. Here, you'll be part of a company that values and champions new ways of thinking, work with dynamic individuals, and acquire new skills and experiences that will propel your career to new heights.

Making animals' lives better makes life better - join our team today!

We are seeking a Principal Network Security Engineer to assist us in designing and implementing firewall and network access control (NAC) technology solutions across IT and OT networks. The Principal Network Security Engineer will contribute to delivering various technical products in collaboration with other engineers, architects, and operational support teams.

The Principal Network Security Engineer will be part of the team responsible for developing and supporting Elanco's Network Security Platform. The team collaborates closely with technical service owners, architects, and the operations team to continuously raise the reliability bar for our services while guiding the adoption of Elanco's network and security platform. The team provides direction for implementing modern technologies and a zero-trust strategy throughout all stages of the service development life cycle.

Responsibilities

• Work with the Network Architect to design, develop and maintain the enterprise security architecture.
• Ensure that all projects have an Operations hand over plan, including creating and maintaining appropriate documentation and knowledge articles to ensure our solutions are easily understood and well recorded, in accordance with regulatory standards.
• Oversee firewall and NAC security projects within the organization.
• Be the ultimate escalation point for issues in Operations.
• Help provide technical direction, consultancy, and mentorship to junior engineers, the network security team, and infrastructure operations teams.
• Focus on the creation and execution of medium to high complexity firewall tasks.
• Drive medium to high complexity NAC engineering projects.
• Work with InfoSec and TechOps teams to improve the execution of network security design reviews by the operational team.
• Interact with Operations support teams as part of the technology lifecycle and report back on operational challenges.
• Provide business IT consultancy to ensure services are secured by design.
• Deliver network security engineering projects per agreed policies, processes, and procedures.
• Ongoing policy review and adjustment to maintain and develop our security posture.
• Proactively research emerging technologies, approaches, and the overall threat landscape to enhance Elanco's network security posture.
• Set and ensure the delivered solution meets technical, architectural, and application principles and complies with our IT Security, Privacy, and Quality needs.
• Actively building and staying abreast of emerging technologies, guiding teams on how to interpret and best leverage the emerging technologies.
• Engaging in the community (internally and externally) across multiple channels, looking to share, educate, and inspire.

What you need to Succeed (minimum qualifications)

• At least 5 years' experience in network security engineering and design, including hands-on experience with next-generation firewalls, which must include Palo Alto Networks.
• Experience in designing, building, and documenting technical solutions.
• Experience with implementing and maturing network security controls and procedures.
• Experience with routing protocols (OSPF), Cisco switching, Palo Alto Global Protect VPN.
• Experience maintaining Palo Alto Panorama, Logger, licensing, and other Palo Alto Cloud solutions.
• Understanding of the principles of a Network Access Control system.
• Familiar with Zero Trust Network and Zero Trust Edge adoption.
• Understanding of modern security architectures, e.g., micro-segmentation, application identity, and distributed firewalls.
• Strong communication skills with multiple examples of being able to convey complex ideas in a manner that resulted in a definitive direction and result
• Strong personal & work organisational skills, including documentation such as diagramming, creation/modification of high and low-level designs, knowledge base articles, etc.
• Ability to analyse rulesets and identify opportunities for enhancement through rule consolidation, audit, etc.
• Typical Utilization Profile:
• 25% Focus on high complexity changes: lab, pilot, execution in production environments, and handover to operations
• 25% Roadmap, vision, and expansion of firewall service line/offering
• 25% Roadmap, vision, and expansion of our NAC service line/offering
• 25% Team guidance, mentorship, and documentation maintenance

What will give you a Competitive Edge (preferred qualifications)

• Familiar with scripting and automation
• Experience with public cloud platforms (Azure or GCP), including integration of Palo Alto VM series firewalls into cloud networks
• Experience with OT, manufacturing, or other regulated environments
• Experience with common OT systems and protocols
• Experience with Forescout CounterACT NAC or other enterprise NAC solutions
• Experience with Meraki MX Series Security Policy
• Experience working with vendors and MSPs
• Strong passion for new technologies, new ideas, and creative ways of thinking
• Agile exposure and experience
• Palo Alto, Cisco CCNP-Security, CISSP, or other security certification

Additional Information

• Travel: 0-10%
• Location: Hook, UK - Hybrid Work Environment
• Working standard hours or shift with occasional work across time zones to support the global business may be required

Elanco is an EEO/Affirmative Action Employer and does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status