Security Engineer

Richmond Square Consulting Ltd; Manchester; On-site; GBP 75,000 - 90,000; Full time

Benefits offered by this job

Bonus and Company Benefits

Job summary

Richmond Square Consulting is recruiting an experienced Security Engineer to secure on-premise infrastructure and hybrid-cloud environments in a regulated setting. The role emphasizes hands-on engineering over policy work, focusing on NSX, firewalling, Windows security and secure architecture.

You will implement security controls, manage Cisco/network security, and contribute to vulnerability management and DevSecOps practices.

Qualifications

• Hands-on security engineering in a high-security environment.
• Experience securing on-premise infrastructure and hybrid-cloud setups.
• VMware NSX and distributed firewall experience required.
• Palo Alto firewall configuration and policy management.
• Strong Windows Server, AD, and Group Policy security experience.
• Knowledge of CIS Benchmarks/STIGs or similar hardening standards.
• Understanding of zero-trust, network segmentation, IAM, encryption and secure architecture.

Responsibilities

• Implement and maintain security controls across on-prem VMware infrastructure.
• Lead configuration and optimization of VMware NSX and micro-segmentation.
• Support zero-trust principles and reduce lateral movement risk with VMware vDefend.
• Configure Palo Alto firewalls, policies, threat prevention, NAT and VPNs.
• Secure Windows Server, Active Directory and Group Policy per standards.
• Apply CIS Benchmarks and hardening standards.
• Support monitoring, logging, alerting and incident response via Elastic Stack.

Skills

VMware NSX

Palo Alto

Windows security

Cisco networking

Zero-trust

IAM

Network segmentation

Tools

Elastic Stack

Elastic Security

VMware vDefend

Job description

Security Engineer – Infrastructure & Network Security
Manchester

Richmond Square Consulting is working with a growing technology business to recruit an experienced Security Engineer for a highly secure, regulated environment. This is a genuinely hands-on engineering role focused primarily on securing complex on-premise infrastructure, alongside hybrid-cloud environments. It would suit somebody with strong experience across VMware NSX, enterprise firewalling, Windows security and network segmentation who enjoys implementing and improving security controls rather than simply producing policies or architecture documents.

Package and working arrangements

• £75,000-£90,000 depending on experience
• Bonus and Company Benefits
• Full-time position
• Five days per week onsite in Manchester
• Occasional UK travel may be required.
• Active UK government SC clearance required.
• Candidates must be willing and eligible to undergo Developed Vetting.

The role

• Implement and maintain security controls across on-premise VMware infrastructure.
• Lead the configuration and optimisation of VMware NSX, distributed firewall policies and micro-segmentation.
• Work with VMware vDefend to support zero-trust principles and reduce lateral movement risk.
• Configure and manage Palo Alto next-generation firewalls, including policy creation, threat-prevention profiles, NAT and VPNs.
• Secure Windows Server, Active Directory and Group Policy environments in line with recognised security standards.
• Apply CIS Benchmarks, STIGs and other system-hardening standards.
• Support security monitoring, logging, alerting and incident response using Elastic Stack and Elastic Security.
• Contribute to vulnerability management, root-cause analysis and remediation activity.
• Support security controls across VMware Cloud Foundation, AWS, Azure and GCP.
• Embed security into operational processes and DevSecOps practices.
• Work closely with engineering teams, vendors, auditors and internal stakeholders.

Experience required

• Strong hands-on experience within security engineering, infrastructure security or network security.
• Proven VMware NSX experience, including micro-segmentation and distributed firewall policies.
• Experience with VMware vDefend or closely related VMware security technologies.
• Strong Palo Alto firewall experience.
• Good Cisco networking and security knowledge.
• Extensive Windows Server, Active Directory and Group Policy security experience.
• Experience applying CIS Benchmarks or similar hardening standards.
• Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture.
• Experience with vulnerability management, SIEM, logging and incident response.
• Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity.
• Experience with Elastic Stack or Elastic Security would be highly advantageous.
• Exposure to cloud security, DevSecOps, Linux hardening, container security or regulated government environments would also be useful.

This is an excellent opportunity for a practical Security Engineer to take ownership of meaningful technical work within a high-security environment using modern infrastructure and security technologies.