Senior Network Security Engineer On site

ITC Secure; City Of London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

25 days annual leave

Pension scheme

Private health insurance

Enhanced maternity and paternity leave

Death-in-service life cover

Shopping discounts

Cycle to work scheme

Season ticket/gym loans

Online wellbeing centre

Job summary

ITC Secure in London is seeking an experienced Network Security Engineer to join our 24x7 NOC. You will support a globally operating bank, handling configurations, firewall policies, and high-priority incidents while coordinating with internal teams and the customer.

Strong English communication and L2/L3 support experience are essential for success. You will work in a hybrid setup with on-site days in Central London, contribute to ITIL incident/change processes, and share knowledge across the

Qualifications

• Must have strong English communication skills, both written and verbal.

Responsibilities

• Create/modify device configurations across switching and routing.
• Create/modify firewall configurations for Cisco, Fortinet, Palo Alto, etc.
• Monitor, manage and support secure network environments for a financial services client.
• Perform daily health checks on the network.
• Escalate and manage high-priority incidents under ITIL processes.
• Produce timely reports and maintain documentation for knowledge sharing.
• Participate in out-of-hours changes and on-call escalation when required.

Skills

L2/L3 Network support

Troubleshooting under pressure

Report writing

Customer-facing

ITSM tooling

Education

Cisco CCNP Enterprise

Cisco CCNP Security

Fortinet NSE 4/5

Implementing Cisco ACI

Palo Alto Networks NGFW Engineer

Riverbed Certified Solutions Associate

ITIL Foundation

Tools

SolarWinds

Jira

SharePoint

Visio

Job description

Reports to: Head of NOC

Job purpose: Working as part of a team of experienced Network Security Engineers, including our 24x7 NOC this role will provide dedicated support for the customer. The role, alongside side another Network Security Engineer will, on a day to day basis report directly to the customer. The role will monitor, manage and support highly secure, complex network environments for our financial services customer, a global bank with offices in Central London.

Key interfaces: Internal network and security teams within the Customer, ITC NOC Manager, Service Manager / Account Management, Network Security Engineers (both within the Customer and the ITC NOC), SOC Analysts and Vendors

The role will involve:

• Creating/modifying device configurations across switching and routing products,
• Creating/modifying firewall configurations and policies for different vendors (Cisco, Fortinet, Palo Alto, etc)
• Working knowledge of Fortigate Firewalls, Cisco FTD, Cisco ACI, Cisco Nexus and Catalyst switches, Cisco ISE NAC, Cisco Wireless, Palo Alto Firewalls, F5 BigIP server load balancers, dynamic routing protocols and best practice device configuration,
• Experience working with network management platforms (SolarWinds)
• Excellent troubleshooting skills, with prior experience working as an escalation engineer managing high-priority incidents. You will need to be able to work well under pressure and with a calm demeanour,
• Ability to consistently deliver to deadlines while prioritising competing demands for time,
• Ability to understand and follow ITIL processes, notably incident and change management - raising changes and seeking approval, joining CAB calls, coordination of testers,
• Willingness to share information, improve documentation, and train other engineers,
• Able to meet demands for occasional out-of-hours working and on-call escalation, performing out of hours changes across the network - post 6pm Friday & Weekends,
• Customer-facing with good report-writing skills and strong communication skills at all levels,
• Completing daily health checks on the network,
• Working internally within the Customer, supporting internal teams on BAU projects,
• Working between the Customer and ITC NOC ensuring any incidents, changes, service requests are responded to in a timely manner,
• Working knowledge of ITSM tooling, specifically Jira, SharePoint,
• Updates to design documentation, Visio and SolarWinds maps,
• Duty of care, working as part of a team, supporting other engineers and the customer.

We are looking for someone with:

• The below certifications or equivalent work-related experience
  • Cisco CCNP Enterprise (essential)
  • Cisco CCNP Security (essential)
  • Fortinet Certified Professional - NSE 4 / NSE 5 (essential)
  • Implementing Cisco Application Centric Infrastructure (desirable)
  • Palo Alto Networks Next-Generation Firewall Engineer (desirable)
  • Experience with automation tooling - Ansible, Catalyst Centre, etc (desirable)
  • Riverbed Certified Solutions Associate certification (desirable)
  • ITIL Foundation (desirable)
• The ability to communicate fluently and confidently to a high standard in both written and verbal English (essential)
• Demonstrable competence and capability in a L2 & L3 network support role (essential)
• Confident working knowledge of Cisco FTDs and ACI, Palo Alto, VPNs, Fortinet, routing and switching administration via GUI & CLI (essential)
• Experience in Four or more of the following areas, ideally at a support level (essential)
  • Firewall Management: Cisco FTD and Palo Alto, Fortinet Fortigate
  • Cisco ACI; Nexus and Catalyst Switches and Cisco IOS Routers
  • Cisco Identity Services Engine - ISE (Tacacs, Network Access Control)
  • Load Balancing: F5,
  • Riverbed Steelhead
  • Monitoring: SolarWinds
  • Wireless Lan Controllers: Cisco
  • Complex Natting
• Experience with market data / trader platforms / cloud (essential)
  • Raising/chasing issues with market-data leased lines and provider networks
  • Supporting connectivity issues for multiple trader platforms
  • Cloud connectivity: Azure, AWS, GCP, OCI (Oracle Cloud) knowledge of VPCs etc
  • Multicast support and troubleshooting
• Ability to cope successfully under pressure and with shifting priorities

Working hours:

Normal working hours are 8 hours per day Monday to Friday between the hours of 07:00 - 16:00 and 09:00 - 18:00.

Working location:

This is a hybrid-based role with 2 days a week on-site at the customers offices in Central London. The role involves out of hours support paid as overtime for activities such as the deployment of changes escalation during major incidents.

Travel:

Occasional travel may be required depending on project work undertaken.

Benefits:

• 25 days annual leave.
• Pension scheme.
• Private health insurance.
• Enhanced maternity and paternity leave.
• Death-in-service life cover.
• Shopping discounts.
• Cycle to work scheme.
• Season ticket/gym loans.
• Online wellbeing centre.

This job description is intended to convey information essential to understanding the scope of the role and it is not intended to be an exhaustive list of skills, efforts, duties, responsibilities or working conditions associated with the position.