Senior Firewall Architect: Policy as Code Governance

OpticoreIT Limited; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Opticore IT is recruiting a Senior Security Engineer for a 6-month contract in Central London, working 2 days per week on-site. You will lead the design and delivery of a new firewall governance framework, focusing on Cisco FTD and FortiGate estates, with risk-based remediation and policy-as-code initiatives.

You will engage with Technology Risk and the CISO office, produce ownership models, RACI, and warranty documentation, and drive change control in a regulated financial services environment.

Qualifications

• Experience designing firewall governance models and operating models.
• Proven ability to remediate firewall rule bases and drive risk-based recertification.
• Strong stakeholder engagement across second line and risk teams.

Responsibilities

• Lead design of firewall governance framework for banking client.
• Review policies, reports, CMDB ownership data to establish current state.
• Define rule design standards for Cisco FTD and FortiGate and data model for Policy as Code.
• Deliver workshops, onboarding packs, and support sign-off with Technology Risk and CISO office.
• Map rules to business units and validate ownership with BU stakeholders.
• Remediate wide and overly permissive rules with risk-based approach and document changes.

Skills

Cisco FTD/FMC FortiGate

Firewall governance

Policy as Code

Stakeholder engagement

Change control in FS environments

Tools

AlgoSec Firewall Analyzer

Ivanti

Cisco FTD

FortiGate

Job description

Opticore IT is recruiting a Senior Security Engineer for a 6-month contract in Central London, working 2 days per week on-site. You will lead the design and delivery of a new firewall governance framework, focusing on Cisco FTD and FortiGate estates, with risk-based remediation and policy-as-code initiatives.

You will engage with Technology Risk and the CISO office, produce ownership models, RACI, and warranty documentation, and drive change control in a regulated financial services environment.