Senior Network Security Engineer

SISL Global; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

SISL Global is seeking a Senior Network Security Engineer to support design, configuration, monitoring and maintenance of security hardware, systems and software in our UK network environments.

You will work with stakeholders to deliver secure designs, implement firewall and VPN solutions, and ensure documentation and governance align with KPIs and SLAs. 5+ years' experience and relevant certifications are preferred.

Qualifications

• Educated to degree level or equivalent experience.
• Bachelor’s degree in computer science, Information Technology, or a related field.
• CISSP, CCNP Security, Check Point CCSA, and F5 certifications are desirable.

Responsibilities

• Lead technical role in resolving complex service incidents with diagnosis and change control.
• Deliver outputs within KPI and SLA constraints.
• Govern inbound deliveries from design to live environment for successful delivery.
• Develop detailed logical designs for firewalls, load balancers, and VPNs.
• Analyse traffic patterns and resolve congestion in network security hardware.
• Create secure network designs using routers and switches.
• Monitor performance and plan future changes accordingly.
• Communicate architecture and solutions with stakeholders at all levels.
• Establish procedures and best practices for network security operations.

Education

Bachelor’s degree in computer science, Information Technology, or a related field

CISSP

CCNP Security

Check Point Certified Security Administrator (CCSA)

F5 Certified Technical Specialist (BIG-IP)

Tools

Checkpoint Appliances

F5 Appliances

Cisco ISE

Job description

The Senior Network Security Engineer is responsible for supporting the design, configuration, monitoring and maintenance of network security hardware, systems, and software; including preparing any documentation for future reference and ensuring communication regarding network security and other issues is provided timely.

Accountabilities

• Be the lead technical role in resolving complex service incidents, applying diagnosis, maintenance, change and configuration control attributes to bring about a resolution.
• Consistently perform and deliver outputs within the service contract time constraints (KPI’s & OLAs/SLA’s).
• Apply technical governance to inbound deliveries from the project design phase to ensure they accurately reflect the live environment and are appropriately structured to enable successful technical service delivery.
• Develop and implement detailed logical designs in areas of – Firewalls, Load balancers, Layer 3 VPN, Layer 2 VPN.
• Analyse traffic behaviours, identify and resolve any congestion or traffic issues related to network security hardware or protocols.
• Develop secure network designs, maximizing the usage of equipment such as routers and switches.
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.
• Work with internal and external stakeholders to fill information gaps and communicate architecture and technical solutions.
• Establish procedures and best practices for network security operations.

Key Stakeholders

External:

• Strategic and operational third-party partners

Internal:

• Network Product Manager
• Network Support Manager
• Capacity, Release & Deployment Manager
• Network Services Manager
• Network Operations Centre Engineers
• Governance and Reporting Manager

People Specification

Qualifications

Educated to degree level or equivalent experience.

• Bachelor’s degree in computer science, Information Technology, or a related field.

Relevant industry certifications such as:

• CISSP (Certified Information Systems Security Professional)
• CCNP (Cisco Certified Network Professional) Security certification, or equivalent knowledge and experience.
• Check Point Certified Security Administrator (CCSA)
• F5 Certified Technical Specialist (BIG-IP)

Skills

• Strong technical competence in Networking security
• Maintaining and updating firewalls and testing the organization’s network and systems - essential
• Knowledge and experience installing and supporting Checkpoint and F5 Appliances, and Cisco ISE - desirable
• Implementing network security blueprints prepared by security architects - essential
• Strong skills in interpreting, producing, and tracking technical documentation.
• Strong communications skills within a department to provide confidence and direction to level 2 colleagues.
• Ability to communicate effectively verbally and written with stakeholders at all levels, from end users to project managers, etc. and provide information which will support and influence the decision-making process within the Network Service Management.
• Ability to plan, prepare, and organize large scale implementations and project deliveries.
• Strong problem-solving skills. Able to identify and resolve problems timely, gather and analyze information effectively, and develop alternative solutions where appropriate.
• Strong interpersonal skills. Maintain confidentiality and listen to others.

Experience

• 5+ years’ experience required in a similar role.
• Experience in designing, deploying, and maintaining MPLS, VPN and VRF network cores.
• Functional understanding of Layer 2 functions and switching (VLAN, VXLAN, STP, MAC Filtering, etc.).
• Experience with VoIP.
• Experience with Cisco, Juniper and Palo Alto preferred.
• Knowledge of industry standard network systems designs and implementation.
• Knowledge of security and communications networks; and knowledge of technical and user-related aspects of a personal computer environment preferred.
• Experience with the following preferred: DNS, DHCPv4, DHCPv6, or IPAM/DDI.

Scope of the role

Reporting to

Network Product Manager

Location

Based in UK, ideally within travelling distance of Heathrow