Senior Firewall / Security Network Engineer

Francisco Partners; Greater London; On-site; GBP 110,000 - 150,000; Full time

Job summary

8x8 UK Ltd. is seeking a Senior Firewall / Security Network Engineer to own the design, delivery, and operation of the firewall and security estate across on‑prem data centers and cloud environments (AWS, OCI).

This hands‑on senior role will establish the firewall architecture for hybrid connectivity and manage day‑to‑day changes and incidents to keep the business secure. You'll migrate a multi‑vendor estate to FortiGate, incorporating the cloud security layer essential for the AWS migration,

Qualifications

• Hands-on FortiGate/FortiOS expertise with VDOMs, policies, NAT, SSL inspection.
• Cloud network security design for AWS and OCI, and hybrid on-prem/cloud flows.
• Disciplined change management: implementation, testing, rollback, peer review.
• Strong connectivity troubleshooting across the packet path (drops, TLS, DNS, routing).
• Ability to translate requirements into secure, standardized firewall policy.

Responsibilities

• Design and deliver firewall/security layer for cloud and hybrid connectivity in AWS, OCI, and on-prem.
• Own route/prefix and policy design to enable secure cross-site workloads.
• Lead migrations to FortiGate with policy review, rebuild, and cutover.
• Plan quarterly firewall upgrades and hardware refreshes with minimal disruption.
• Manage IPsec/site-to-site migrations and firewall decommissioning.

Skills

FortiGate / FortiOS

Cloud network security

Change management

Connectivity troubleshooting

Policy design

Tools

FortiAnalyzer

FortiConverter

AWS

OCI

Job description

8x8 connects our customers and teams globally, empowering CX leaders with performance and insights to make smarter decisions, delight customers, and drive lasting business impact.

We're hiring a Senior Firewall / Security Network Engineer to own the design, delivery, and operation of our firewall and network-security estate across on-prem data centers and cloud (AWS, OCI). This is a hands‑on senior role: you'll set the firewall architecture — especially for hybrid and cloud connectivity — while running the day‑to‑day change and incident work that keeps the business connected and secure. You'll be the technical anchor as we migrate a multi‑vendor estate onto a standardized FortiGate platform and build the cloud security layer our AWS migration depends on.

What you'll do

Cloud & hybrid firewall architecture

• Design and deliver the firewall/security layer for cloud and hybrid connectivity — AWS (Transit Gateway, VPC, GWLB), OCI, and on-premcloud traffic flows.
• Own route/prefix and policy design across the boundary so cloud workloads reach on-prem services (and vice versa) securely and without becoming snowflakes.
• Partner with the security operations, cloud and platform teams to make the security design a first‑class part of migration planning, not an afterthought.

Firewall policy engineering & change management

• Translate connectivity requests from application, database, and cloud teams into clean, standards‑based firewall policy (allow/NAT/port/service rules, TLS flows).
• Drive changes through the RP change‑management process — with clear implementation, testing, and rollback plans — and peer‑review others' changes.
• Keep policy consistent and auditable across sites; retire one‑off exceptions. Migration & platform lifecycle
• Lead migrations from legacy Cisco and Juniper to FortiGate , including policy review, rebuild, and cutover.
• Plan and execute quarterly firewall software upgrades and hardware refreshes with minimal disruption.
• Manage IPsec/site-to-site migrations and firewall decommissioning.

Operations, incident response & availability

• Triage and resolve connectivity incidents — blocked/dropped traffic, TLS handshake failures, VPN outages, firewall failovers.
• Own the out-of-band (OOB) management network for firewalls: reachability, console access, and monitoring enablement.

Observability, logging & compliance

• Integrate firewalls with logging and monitoring — FortiAnalyzer, SIEM log forwarding, netflow, SNMP.
• Help close misconfiguration and risk findings

Required qualifications

• Hands‑on FortiGate / FortiOS expertise: VDOMs, security policy, NAT, SSL inspection, FortiAnalyzer, and FortiConverter.
• Cloud network security: firewall/connectivity design in AWS (TGW, VPC, GWLB) and/or OCI, including hybrid on-premcloud flows..
• Disciplined change management: implementation, testing, and rollback planning, plus peer review.
• Strong connectivity troubleshooting across the packet path (drops, TLS, DNS, routing).
• Ability to work directly with application, database, cloud, and security teams to turn requirements into secure, standardized policy.

Preferred / nice‑to‑have

• Experience using AI services/assistants in an engineering workflow — AI‑assisted troubleshooting, config generation, or building tooling and automation around network/security systems (e.g. API‑driven agents, MCP servers)
• Network automation — Ansible, AWX, or similar — for config and policy management.
• SIEM / observability tooling (FortiAnalyzer, netflow, SNMP, log pipelines).
• Multi‑site WAN and data‑center networking experience.
• Scripting (Python or similar) for tooling and validation.
• Exposure to security frameworks and audit/misconfiguration remediation.

How the role works

• High cross‑functional surface: application/DB/cloud teams (connectivity requests), SecOps and the broader security org (risk sign‑off, shared initiatives), and site/infra teams (builds and migrations). - Work is tracked and delivered through the team's change process

For a closer look into what life at 8x8 UK Ltd. is about check out our Instagram page.

8x8 believes diversity makes our company stronger which is why we are a proud equal opportunities employer and encourage all of our staff to bring their authentic selves to work. We believe in fairness which is why we have been a member of the Living Wage Foundation for many years and we believe in security so reserve the right to undertake background checks on anyone that we extend an employment offer to.

Our Job Applicant Privacy Notice can be found here.

Learn more on our company website at www.8x8.com follow our pages on LinkedIn, Twitter, Facebook and Instagram.