Senior Network Security Engineer — Firewall Policy as Code

Opticore IT Ltd; Greater London; Hybrid; GBP 111,000 - 148,000; Full time

Job summary

Opticore IT is seeking a Senior Network Security Engineer with expertise in Cisco Firepower and FortiGate to join on an initial 4-month contract (inside IR35). The role involves hands-on engineering and acting as the design authority for firewall policy reviews for a global financial markets bank.

Expect to spend two days per week in our Central London office. You will author standards, design policy schemas, validate Ivanti configurations, and drive remediation to improve firewall rule quality

Qualifications

• Experience in Cisco Firepower (FMC/FTD) and FortiGate policy engineering.
• Experience performing firewall policy reviews and remediation for large estates.

Responsibilities

• Author the Rule Design Standard for Cisco FTD and FortiGate.
• Design and own the vendor-neutral rule schema.
• Validate Ivanti firewall catalog item readiness for client configuration.
• Produce change packs with rollback plans during CAB.
• Analyse observed flows in Elastic to design explicit service rules.
• Define how Firewall Policy as Code integrates with Ivanti and AlgoSec.

Skills

Cisco Firepower

FortiGate

Policy as Code

Change management

Risk analysis

Tools

Ivanti

AlgoSec

Elastic

Cisco FMC/FTD

FortiGate

Job description

Opticore IT is seeking a Senior Network Security Engineer with expertise in Cisco Firepower and FortiGate to join on an initial 4-month contract (inside IR35). The role involves hands-on engineering and acting as the design authority for firewall policy reviews for a global financial markets bank.

Expect to spend two days per week in our Central London office. You will author standards, design policy schemas, validate Ivanti configurations, and drive remediation to improve firewall rule quality