SC Cleared Network Engineer

JR United Kingdom; London; Remote; GBP 100,000 - 125,000; Full time

Job summary

A leading company in the UK is seeking an SC Cleared Network Engineer for a 6-month contract. This remote role involves maintaining Security Gateway components, ensuring configurations are up-to-date, and providing support for various security systems. Candidates should have strong DevOps and network engineering skills, with a focus on AWS and Terraform.

Qualifications

• Possess both DevOps and network engineering skills.

Responsibilities

• Maintain and support Security Gateway components in both Non-Prod & Production environments.
• Respond to Protective Monitoring alerts and troubleshoot NGINX and FortiGate issues.

Skills

DevOps

Network Engineering

Job description

Social network you want to login/join with:

SC Cleared Network Engineer - 6 months+ - £500-600pd Inside IR35 - Remote with occasional travel to London

Looking for an SC Cleared Network Engineer to provide engineering support. The engineer should possess both DevOps and network engineering skills.

Security Gateway FortiGate Management

• Maintain and support this component in the Connectivity account for both Non-Prod & Production environments.
• Ensure this component gets rebuilt every 4 weeks by Jenkins.
• Amend configuration/code via Terraform as required on an ad hoc basis, including:
  • Anti-virus
  • IPS
  • WAF
  • File-Filter
  • AWS Terraform provider updates
  • FortiFlex API changes
  • Associated infrastructure: Route 53, S3, Load balancer, Lambda, etc.
  • Certificate deployment
  • Vault secrets management

Security Gateway NGINX Management

• Maintain and support this component in the Connectivity account for both Non-Prod & Production environments.
• Ensure this component gets rebuilt every 4 weeks using Jenkins/Packer with the latest Amazon Linux 2023 AMI.
• Amend configuration via Terraform as required on an ad hoc basis, including:
  • Instance type/size
  • Additional TO
  • Amendment to TO configuration
  • Deployment of new TO client certificate (yearly)
  • AWS Terraform provider updates
  • Associated infrastructure: Route 53, Load balancer, etc.
  • Certificate deployment
  • Vault secrets management

Security Gateway Support

• Respond to Protective Monitoring alerts.
• Support A&T team when experiencing issues connecting to TOs.
• NGINX troubleshooting, including reviewing Kibana logs, SSH access to NGINX servers.
• FortiGate troubleshooting, including reviewing protective monitoring, running packet captures.
• Raise FortiFlex license renewal requests with client licensing (expected once every 4-5 years).
• Review FortiFlex usage reports and emails.
• Respond to CloudWatch alarms (examples include CPU alarms).

Security Gateway Support Onboarding / Provisioning

• Add users to Security Enforcing Services AD groups.
• Add users to Security Enforcing Services AWS Console groups.