Senior Firewall / Security Network Engineer

8x8; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

8x8 UK Ltd. is seeking a Senior Firewall / Security Network Engineer to own the design, delivery, and operation of firewall and network security across on‑prem data centers and cloud (AWS, OCI).

This hands‑on senior role will set the firewall architecture for hybrid and cloud connectivity, while managing day‑to‑day changes and incident response to keep the business secure. You will lead migrations to FortiGate, drive quarterly upgrades, and ensure policy consistency across sites with auditable

Qualifications

• Hands-on FortiGate / FortiOS expertise including VDOMs, NAT, SSL inspection.
• Cloud & hybrid firewall design for AWS and OCI with on-prem interactions.
• Disciplined change management: implement, test, rollback with peer reviews.
• Strong connectivity troubleshooting across packet path, TLS, DNS, routing.

Responsibilities

• Design and deliver firewall/security layer for cloud and hybrid connectivity (AWS, OCI, on-prem).
• Own route/prefix and policy design across boundary for secure cloud-to-on-prem access.
• Lead migrations from legacy Cisco/Juniper to FortiGate and plan quarterly upgrades.
• Triage and resolve connectivity incidents and outages; manage OOB firewall access.
• Integrate firewalls with logging/monitoring (FortiAnalyzer, SIEM).

Skills

FortiGate FortiOS

Cloud network security

Change management

Connectivity troubleshooting

Cross-functional collaboration

Tools

FortiAnalyzer

FortiConverter

Ansible

AWX

SIEM

Job description

8x8 connects our customers and teams globally, empowering CX leaders with performance and insights to make smarter decisions, delight customers, and drive lasting business impact.We're hiring a **Senior Firewall / Security Network Engineer** to own the design, delivery, and operation of our firewall and network-security estate across on-prem data centers and cloud (AWS, OCI). This is a hands-on senior role: you'll set the firewall architecture — especially for hybrid and cloud connectivity — while running the day-to-day change and incident work that keeps the business connected and secure. You'll be the technical anchor as we migrate a multi-vendor estate onto a standardized FortiGate platform and build the cloud security layer our AWS migration depends on.**What you'll do****Cloud & hybrid firewall architecture*** Design and deliver the firewall/security layer for cloud and hybrid connectivity — AWS (Transit Gateway, VPC, GWLB), OCI, and on-premcloud traffic flows.* Own route/prefix and policy design across the boundary so cloud workloads reach on-prem services (and vice versa) securely and without becoming snowflakes.* Partner with the security operations, cloud and platform teams to make the security design a first-class part of migration planning, not an afterthought.**Firewall policy engineering & change management*** Translate connectivity requests from application, database, and cloud teams into clean, standards-based firewall policy (allow/NAT/port/service rules, TLS flows).* Drive changes through the RP change-management process — with clear implementation, testing, and rollback plans — and peer-review others' changes.* Keep policy consistent and auditable across sites; retire one-off exceptions. Migration & platform lifecycle* Lead migrations from legacy Cisco and Juniper to FortiGate , including policy review, rebuild, and cutover.* Plan and execute quarterly firewall software upgrades and hardware refreshes with minimal disruption.* Manage IPsec/site-to-site migrations and firewall decommissioning.**Operations, incident response & availability*** Triage and resolve connectivity incidents — blocked/dropped traffic, TLS handshake failures, VPN outages, firewall failovers.* Own the out-of-band (OOB) management network for firewalls: reachability, console access, and monitoring enablement.**Observability, logging & compliance*** Integrate firewalls with logging and monitoring — FortiAnalyzer, SIEM log forwarding, netflow, SNMP.* Help close misconfiguration and risk findings**Required qualifications*** Hands-on FortiGate / FortiOS expertise: VDOMs, security policy, NAT, SSL inspection, FortiAnalyzer, and FortiConverter.* Cloud network security: firewall/connectivity design in AWS (TGW, VPC, GWLB) and/or OCI, including hybrid on-premcloud flows..* Disciplined change management: implementation, testing, and rollback planning, plus peer review.* Strong connectivity troubleshooting across the packet path (drops, TLS, DNS, routing).* Ability to work directly with application, database, cloud, and security teams to turn requirements into secure, standardized policy.**Preferred / nice-to-have*** Experience using AI services/assistants in an engineering workflow — AI-assisted troubleshooting, config generation, or building tooling and automation around network/security systems (e.g. API-driven agents, MCP servers)* Network automation — Ansible, AWX, or similar — for config and policy management.* SIEM / observability tooling (FortiAnalyzer, netflow, SNMP, log pipelines).* Multi-site WAN and data-center networking experience.* Scripting (Python or similar) for tooling and validation.* Exposure to security frameworks and audit/misconfiguration remediation.**How the role works*** High cross-functional surface: application/DB/cloud teams (connectivity requests), SecOps and the broader security org (risk sign-off, shared initiatives), and site/infra teams (builds and migrations). - Work is tracked and delivered through the team's change processFor a closer look into what life at 8x8 UK Ltd. is about check out our Instagram page. 8x8 believes diversity makes our company stronger which is why we are a proud equal opportunities employer and encourage all of our staff to bring their authentic selves to work. We believe in fairness which is why we have been a member of the Living Wage Foundation for many years and we believe in security so reserve the right to undertake background checks on anyone that we extend an employment offer to.