Senior Network Security Engineer

Bonhill Partners; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Bonhill Partners is seeking an experienced Network Security Engineer to own the design, implementation, and enhancement of secure network infrastructure across on-premise, cloud, and hybrid environments.

The role focuses on Azure networking, Zero Trust, and secure connectivity, with hands-on responsibilities across firewalls, AVN, and security tooling. Initial 6-month contract with potential for permanency.

Qualifications

• 5+ years of experience in Network Security Engineering.
• Strong Azure networking and security experience.
• Hands-on experience implementing and managing network security technologies.

Responsibilities

• Design, implement, and support secure network solutions across enterprise and cloud environments.
• Configure and maintain network security technologies including firewalls, web gateways, and access control solutions.
• Deliver network segmentation and micro-segmentation initiatives to reduce organisational risk.
• Support the implementation of Zero Trust and SASE-based security architectures.
• Troubleshoot complex network and security issues across multiple environments.
• Work closely with infrastructure, cloud, and security teams to ensure secure network operations.
• Develop and maintain network security standards, documentation, and operational procedures.
• Design and support secure Azure networking solutions.
• Implement and manage Azure Virtual Networks (VNets), NSGs, Azure Firewall, Private Endpoints, VPN Gateway, and ExpressRoute connectivity.

Skills

Network security engineering

Azure networking

Troubleshooting

Stakeholder communication

Tools

Terraform

ARM

Bicep

Job description

We are looking for an experienced Network Security Engineer to join a growing Cyber Security function, taking ownership of the design, implementation, and ongoing enhancement of secure network infrastructure across on-premise, cloud, and hybrid environments.

This is a hands-on engineering role suited to someone with a strong background in enterprise networking, network security technologies, and Azure cloud networking. You will be responsible for delivering secure connectivity solutions, improving network resilience, and supporting key security transformation initiatives including Zero Trust and network segmentation.

Key Responsibilities

Network Security Engineering

• Design, implement, and support secure network solutions across enterprise and cloud environments.
• Configure and maintain network security technologies including firewalls, web gateways, and access control solutions.
• Deliver network segmentation and micro-segmentation initiatives to reduce organisational risk.
• Support the implementation of Zero Trust and SASE-based security architectures.
• Troubleshoot complex network and security issues across multiple environments.
• Work closely with infrastructure, cloud, and security teams to ensure secure network operations.
• Develop and maintain network security standards, documentation, and operational procedures.
• Design and support secure Azure networking solutions.
• Implement and manage Azure Virtual Networks (VNets), NSGs, Azure Firewall, Private Endpoints, VPN Gateway, and ExpressRoute connectivity.
• Secure hybrid connectivity between on-premise and Azure environments.
• Support cloud-native security controls and best practices within Azure.
• Contribute to the ongoing improvement of cloud security architecture and governance.

Security Technologies

Hands-on experience with:

• Web Application Firewalls (WAF)
• DDoS protection technologies
• Network Access Control (NAC)
• VPN technologies
• Secure Web Gateways (SWG)
• Network monitoring and security tooling

Skills & Experience

• 5+ years' experience in Network Security Engineering.
• Strong experience supporting large-scale enterprise network environments.
• Hands-on experience implementing and managing network security technologies.
• Strong Azure networking and security experience.
• Experience with network segmentation, micro-segmentation, and Zero Trust principles.

Strong understanding of:

• TCP/IP
• Routing & Switching
• BGP and OSPF
• DNS and DHCP
• VPN technologies
• Network security protocols
• Experience working within hybrid cloud environments.
• Strong troubleshooting and incident resolution skills.
• Excellent communication and stakeholder engagement abilities.
• Experience with Infrastructure as Code (Terraform, ARM, or Bicep).
• Knowledge of SASE architectures.
• Exposure to container networking and cloud-native security.
• Industry certifications such as:
• Azure Security Engineer Associate (AZ-500)
• CCNA / CCNP / CCIE
• Network+

This will be an initial 6 month contract, converting to a permanent position.