Senior NetSec Engineer – FortiGate & Cisco Firepower

OpticoreIT; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Opticore IT is seeking a Senior Network Security Engineer in London to design and implement firewall policies using Cisco Firepower and FortiGate. You will lead rule design standards, performAlgoSec analysis, and coordinate with client CAB processes.

You will validate Ivanti workflows, review Elastic logs, and craft change packs with rollback plans, addressing complex security architectures in finance and telecom sectors.

Qualifications

• Experience with Cisco Firepower (FMC/FTD) and FortiGate policy engineering.
• Strong knowledge of large-scale rule cleanup and AlgoSec analysis.
• Ability to analyze traffic flows and design resilient firewall policies.

Responsibilities

• Author the Rule Design Standard for Cisco FTD and FortiGate, with metadata and design examples.
• Specify the Ivanti firewall request catalogue item workflow for client configuration.
• Validate access, tooling and Elastic log coverage across all in-scope devices.
• Review AlgoSec Firewall Analyzer baseline, rank risks and present baseline measures.
• Produce change packs with rollback plans and implement them out of hours under CAB.
• Analyze observed flows in Elastic to design explicit service rules replacing wide rules.
• Confirm resilient and failover paths before rules are unused and monitor with rollback window.

Skills

Cisco Firepower

FortiGate

Policy Engineering

AlgoSec Analysis

Tools

Ivanti

Elastic

Job description

Opticore IT is seeking a Senior Network Security Engineer in London to design and implement firewall policies using Cisco Firepower and FortiGate. You will lead rule design standards, performAlgoSec analysis, and coordinate with client CAB processes.

You will validate Ivanti workflows, review Elastic logs, and craft change packs with rollback plans, addressing complex security architectures in finance and telecom sectors.