Senior Network Security Engineer

Square One Resources Limited; Coventry; Hybrid; GBP 73,000 - 95,000; Full time

Job summary

Square One Resources Limited is seeking a Senior Network Security Engineer to design, implement and maintain enterprise security across on-premises, cloud and hybrid environments.

This role focuses on driving Zero Trust modernization, securing network architecture and managing enterprise firewall platforms across global infrastructure.

Qualifications

• Extensive experience as a Network Security Engineer.
• Hands-on management of enterprise firewall technologies.
• Strong design and implementation skills for Zero Trust security.

Responsibilities

• Design, implement and maintain enterprise network security across on-prem, cloud and hybrid environments.
• Lead network security transformation and Zero Trust initiatives.
• Configure firewall platforms, policies, NAT and access controls.

Skills

Network Security

Firewall Management

Zero Trust

Cloud Networking

VPN / Remote Access

Education

Professional certifications preferred

Tools

Palo Alto

Check Point

Cisco Firepower

Fortinet FortiGate

Juniper SRX

Job description

Job Advert: Senior Network Security Engineer

Location: Coventry - 3 days per week on-site
Rate: £455 per day (Inside IR35)
Contract: Contract opportunity
Duration: 4 months

Overview

We are seeking an experienced Senior Network Security Engineer to join a high-performing team, responsible for designing, implementing and maintaining robust enterprise network security solutions across on-premises, cloud and hybrid environments.

This is an excellent opportunity for a seasoned network security professional to take a leading role in strengthening security architecture, driving network security transformation and implementing Zero Trust principles across complex enterprise infrastructure.

The successful candidate will bring extensive hands-on experience with enterprise firewall technologies, cloud network security, network segmentation and secure remote access, alongside the ability to lead technical initiatives and protect critical production environments against evolving cyber threats.

Key Responsibilities

• Design, implement and maintain enterprise network security solutions across global, on-premises, cloud and hybrid environments.
• Lead network security transformation, modernisation and Zero Trust initiatives.
• Design, deploy and manage enterprise firewall platforms, including policy configuration, NAT rules, access controls and rule optimisation.
• Develop and implement network segmentation and micro-segmentation strategies to minimise security risks and lateral movement.
• Design and secure cloud network architectures across Microsoft Azure and AWS.
• Implement and manage secure connectivity between cloud platforms and on-premises infrastructure.
• Configure and maintain VPNs, IPSec connectivity, SSL VPNs and secure remote access solutions.
• Monitor network security events, investigate incidents and collaborate with SOC teams to improve threat detection and response.
• Conduct vulnerability assessments, security architecture reviews and remediation activities.
• Ensure network security controls align with relevant policies, industry standards and regulatory requirements.
• Produce technical architecture designs, security assessments, operational documentation and remediation plans.
• Work closely with internal stakeholders, vendors and project teams to deliver secure, resilient network solutions.

Essential Skills and Experience

• Extensive experience in Network Security Engineering.
• Extensive hands-on experience managing enterprise firewall technologies.
• Strong knowledge of Palo Alto, Check Point, Cisco Firepower, Fortinet FortiGate and/or Juniper SRX.
• Proven experience designing and implementing network segmentation and Zero Trust security solutions.
• Strong understanding of Microsoft Azure and AWS networking and security services.
• Experience with hybrid cloud connectivity, secure network architecture and cloud-native security controls.
• Solid knowledge of VPN technologies, IDS/IPS, Web Application Firewalls, DDoS protection and secure remote access.
• Strong networking fundamentals, including BGP, OSPF, MPLS, VLANs and high-availability architectures.
• Experience with security monitoring tools such as Microsoft Sentinel, Splunk, QRadar, Cortex XDR, CrowdStrike or Darktrace.
• Knowledge of vulnerability management, security risk assessments and compliance frameworks.
• Familiarity with automation and infrastructure-as-code tools such as PowerShell, Python, Terraform and Ansible.
• Excellent troubleshooting, analytical, communication and stakeholder management skills.

Desirable Experience

• Hands-on experience with Azure Firewall, Network Security Groups, Application Gateway, Virtual WAN, ExpressRoute and Private Endpoints.
• Experience with AWS Security Groups, Network ACLs, Transit Gateway, AWS Network Firewall, WAF, Shield, Direct Connect and Amazon VPC.
• Knowledge of Zero Trust Network Access (ZTNA), Software Defined Perimeter (SDP) and Secure Access Service Edge (SASE) architectures.
• Experience working in regulated enterprise environments, particularly financial services, banking, insurance, healthcare, telecommunications, utilities or the public sector.
• Relevant industry certifications, such as PCNSE, Check Point CCSE/CCSM, Cisco CCNP/CCIE Security, Fortinet certifications, CISSP, CISM, Microsoft AZ-500 or AWS Certified Security - Specialty.
• Familiarity with ISO 27001, NIST Cybersecurity Framework, CIS Controls, GDPR and Cyber Essentials Plus.

What You'll Bring

You will be a technically strong and proactive security engineer who can operate confidently in complex enterprise environments. You will have the ability to troubleshoot challenging network security issues, influence technical decisions, engage effectively with stakeholders and deliver practical security improvements while maintaining operational resilience.

A strong background in enterprise firewall management, cloud security and Zero Trust networking will be key to success in this role.