Senior Network Security Engineer

CFP Energy Ltd.; London; On-site; GBP 60,000 - 85,000; Full time

Job summary

A leading company in the energy sector is seeking a Senior Network Security Engineer to design and maintain secure network solutions. The role involves collaborating with teams to implement effective security measures and enhance automation processes, ensuring high performance in both on-premise and cloud environments. The ideal candidate is a proactive problem solver with strong technical skills in networking and security.

Qualifications

• 5+ years of experience in network security.
• Strong experience with firewall management (Palo Alto, CheckPoint).
• Proficiency in cloud platforms (AWS, Azure).

Responsibilities

• Design and implement secure network solutions.
• Manage firewall configurations and develop network security tools.
• Drive automation with Infrastructure-as-Code practices.

Skills

Network Security

Routing and Switching

Firewalls

Automation

DevOps

Problem-solving

Communication

Education

Certifications in Network Security (e.g., CCNP Security)

Tools

Terraform

Ansible

Git

ELK Stack

Grafana

Job description

Job Overview:

As a Network Security Engineering team member, the Senior Network Security Engineer will specialise in firewalls and routing. The ideal candidate is a flexible, self-motivated individual who excels at multitasking and thrives in a fast-paced, challenging environment.

This self-starter will bring ingenuity and expertise to design, implement, and maintain secure, scalable, high-performing network solutions that connect on-premises and public cloud environments. The role emphasises driving automation through Infrastructure-as-Code (IaC) and GitOps methodologies, ensuring optimal network performance, and integrating robust security measures.

Responsibilities:

Network Design and Implementation:

• Design and implement secure, scalable, and high-performing network solutions bridging on-premises and public cloud environments.
• Leverage routing and switching expertise (e.g., BGP, OSPF, MPLS) to ensure network performance and reliability across diverse environments.
• Analyze operational needs and proactively develop creative network solutions to address security challenges.

Security and Firewall Management:

• Manage firewall configurations for the Cyber Energia network based on operational requirements.
• Develop and implement network security tools, produce threat models, and assess risks around existing configurations.
• Provide subject matter expertise on network security, firewalls, and industry best practices.
• Document and formalize security processes.

Automation and Infrastructure Management:

• Drive automation initiatives using Infrastructure-as-Code (IaC) practices (e.g., Terraform, Ansible, Chef) and GitOps workflows to streamline network provisioning and enforce configuration consistency.
• Develop CI/CD pipelines tailored for IT infrastructure to enhance deployment efficiency and integrate network security measures.
• Build and maintain internal automation solutions (e.g., Slack bots and integrations) to streamline IT operations and business processes.

Monitoring and Maintenance:

• Manage and maintain network security systems through system patches and periodic maintenance tasks.
• Establish comprehensive observability and proactive issue-resolution strategies using tools like SNMP, Syslog, Netflow, Elasticsearch (ELK Stack), and Grafana.

Collaboration and Communication:

• Work with Cyber Energia teams to identify functional needs, develop secure architectures, and communicate security best practices and policies.
• Collaborate with security teams to align IT automation with Zero Trust principles and compliance frameworks.
• Clearly explain technical concepts to both technical and non-technical audiences, demonstrating excellent stakeholder management skills.

Basic Qualifications:

• 5+ years of experience in network security, IT infrastructure, applications, endpoints, and/or APIs.
• 2+ years of experience hardening Windows, MacOS, and/or Linux operating systems.

Required Skills and Experience:

Technical Expertise:

• Strong experience with enterprise network vendors (e.g., CheckPoint, Palo Alto).
• Proficiency in routing and switching, including protocols like BGP, OSPF, and MPLS.
• Deep understanding of network security principles (e.g., ACLs, firewalls, VPNs, 802.1x authentication, profiling, RBAC).
• Familiarity with network monitoring tools/protocols and logging pipelines (e.g., SNMP, Syslog, Netflow, ELK Stack, Grafana).
• Strong knowledge of cloud platforms (e.g., Azure, AWS, GCP) and infrastructure management.
• Experience with network security technologies, including firewalls (Palo Alto, CheckPoint), IDS/IPS, NDR, switch/router ACLs, NAC solutions, IPSec/TLS VPNs, WAFs, email security, and SIEM logging/alerting.

Programming and Automation:

• Proficiency in a modern programming language (e.g., Python).
• Experience with IaC practices, GitOps workflows, and cloud automation best practices.
• Proven ability to integrate corporate IT infrastructure with CI/CD pipelines and DevOps workflows.
• Familiarity with networking protocols and the OSI model.

General Skills:

• Strong Linux background and passion for open-source technology (a must).
• Excellent analytical, problem-solving, and time-management skills.
• Adept at learning new technologies and systems.
• Experience testing and implementing changes in a production environment.
• Exceptional communication skills (written and verbal) to work cross-functionally with IT, security, and business teams.

Preferred Attributes:

• Demonstrated track record of developing and maintaining internal tools to optimize IT operations.
• Ability to work independently as a self-starter with minimal supervision

The CFP Energy Group is committed to ensuring equal opportunities, fairness of treatment, dignity and respect, and the elimination of all forms of discrimination in the workplace for all employees/contractors and job applicants.