Senior Network Security Engineer

CFP Energy (UK) Ltd; City Of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading energy company is seeking a Senior Network Security Engineer in London. You will focus on designing and maintaining secure network solutions while driving automation through Infrastructure-as-Code and GitOps methodologies. The ideal candidate has over 5 years of network security experience and is proficient in tools like Check Point and Palo Alto, as well as cloud platforms such as Azure and AWS.

Benefits

Equal opportunity workplace

Flexible work environment

Qualifications

• 5+ years of experience in network security, IT infrastructure or applications.
• Proficiency in hardening Windows, MacOS, and/or Linux operating systems.
• Strong background in Linux and open-source technologies.

Responsibilities

• Design and implement secure and scalable network solutions.
• Manage firewall configurations based on operational requirements.
• Drive automation initiatives using Infrastructure-as-Code practices.

Skills

Network Security

Firewall Management

Automation

Routing and Switching

Cloud Platforms

Linux

Problem Solving

Tools

Check Point

Palo Alto

GitOps

Terraform

Azure

AWS

GCP

Job description

JobOverview:

AsaNetworkSecurityEngineeringteammember,theSeniorNetworkSecurityEngineerwillspecialiseinfirewallsandrouting.Theidealcandidateisaflexible,self-motivatedindividualwhoexcelsatmultitaskingandthrivesinafast-paced,challengingenvironment.

Thisself-starterwillbringingenuityandexpertisetodesign,implement,andmaintainsecure,scalable,high-performingnetworksolutionsthatconnecton-premisesandpubliccloudenvironments.TheroleemphasisesdrivingautomationthroughInfrastructure-as-Code(IaC)andGitOpsmethodologies,ensuringoptimalnetworkperformance,andintegratingrobustsecuritymeasures.

Responsibilities:

NetworkDesignandImplementation:

• Designandimplementsecure,scalable,andhigh-performingnetworksolutionsbridgingon-premisesandpubliccloudenvironments.

• Leverageroutingandswitchingexpertise(e.g.,BGP,OSPF,MPLS)toensurenetworkperformanceandreliabilityacrossdiverseenvironments.

• Analyzeoperationalneedsandproactivelydevelopcreativenetworksolutionstoaddresssecuritychallenges.

SecurityandFirewallManagement:

• ManagefirewallconfigurationsfortheCyberEnergianetworkbasedonoperationalrequirements.

• Developandimplementnetworksecuritytools,producethreatmodels,andassessrisksaroundexistingconfigurations.

• Providesubjectmatterexpertiseonnetworksecurity,firewalls,andindustrybestpractices.

• Documentandformalizesecurityprocesses.

AutomationandInfrastructureManagement:

• DriveautomationinitiativesusingInfrastructure-as-Code(IaC)practices(e.g.,Terraform,Ansible,Chef)andGitOpsworkflowstostreamlinenetworkprovisioningandenforceconfigurationconsistency.

• DevelopCI/CDpipelinestailoredforITinfrastructuretoenhancedeploymentefficiencyandintegratenetworksecuritymeasures.

• Buildandmaintaininternalautomationsolutions(e.g.,Slackbotsandintegrations)tostreamlineIToperationsandbusinessprocesses.

MonitoringandMaintenance:

• Manageandmaintainnetworksecuritysystemsthroughsystempatchesandperiodicmaintenancetasks.

• Establishcomprehensiveobservabilityandproactiveissue-resolutionstrategiesusingtoolslikeSNMP,Syslog,Netflow,Elasticsearch(ELKStack),andGrafana.

CollaborationandCommunication:

• WorkwithCyberEnergiateamstoidentifyfunctionalneeds,developsecurearchitectures,andcommunicatesecuritybestpracticesandpolicies.

• CollaboratewithsecurityteamstoalignITautomationwithZeroTrustprinciplesandcomplianceframeworks.

• Clearlyexplaintechnicalconceptstobothtechnicalandnon-technicalaudiences,demonstratingexcellentstakeholdermanagementskills.

BasicQualifications:

• 5+yearsofexperienceinnetworksecurity,ITinfrastructure,applications,endpoints,and/orAPIs.

• 2+yearsofexperiencehardeningWindows,MacOS,and/orLinuxoperatingsystems.

RequiredSkillsandExperience:

TechnicalExpertise:

• Strongexperiencewithenterprisenetworkvendors(e.g.,CheckPoint,PaloAlto).

• Proficiencyinroutingandswitching,includingprotocolslikeBGP,OSPF,andMPLS.

• Deepunderstandingofnetworksecurityprinciples(e.g.,ACLs,firewalls,VPNs,802.1xauthentication,profiling,RBAC).

• Familiaritywithnetworkmonitoringtools/protocolsandloggingpipelines(e.g.,SNMP,Syslog,Netflow,ELKStack,Grafana).

• Strongknowledgeofcloudplatforms(e.g.,Azure,AWS,GCP)andinfrastructuremanagement.

• Experiencewithnetworksecuritytechnologies,includingfirewalls(PaloAlto,CheckPoint),IDS/IPS,NDR,switch/routerACLs,NACsolutions,IPSec/TLSVPNs,WAFs,emailsecurity,andSIEMlogging/alerting.

ProgrammingandAutomation:

• Proficiencyinamodernprogramminglanguage(e.g.,Python).

• ExperiencewithIaCpractices,GitOpsworkflows,andcloudautomationbestpractices.

• ProvenabilitytointegratecorporateITinfrastructurewithCI/CDpipelinesandDevOpsworkflows.

• FamiliaritywithnetworkingprotocolsandtheOSImodel.

GeneralSkills:

• StrongLinuxbackgroundandpassionforopen-sourcetechnology(amust).

• Excellentanalytical,problem-solving,andtime-managementskills.

• Adeptatlearningnewtechnologiesandsystems.

• Experiencetestingandimplementingchangesinaproductionenvironment.

• Exceptionalcommunicationskills(writtenandverbal)toworkcross-functionallywithIT,security,andbusinessteams.

PreferredAttributes:

• DemonstratedtrackrecordofdevelopingandmaintaininginternaltoolstooptimizeIToperations.

• Abilitytoworkindependentlyasaself-starterwithminimalsupervision

The CFP Energy Group is committed to ensuring equal opportunities, fairness of treatment, dignity and respect, and the elimination of all forms of discrimination in the workplace for all employees/contractors and job applicants.