Senior Network & Security Specialist

JAC Recruitment; Greater London; On-site; GBP 55,000 - 60,000; Full time

Benefits offered by this job

Bonus 10%

Job summary

Retail Company in London is seeking a Senior Network & Security Specialist to own and scale secure connectivity across offices, showrooms and warehouses. You will design network architecture, manage SD-WAN and oversee firewall lifecycle, VPNs and WiFi.

You will lead identity and access management with Entra ID and Okta, implement SASE/Netskope to retire legacy VPN, enforce zero-trust, and coordinate with HQ for security controls and incident response.

Qualifications

• 8+ years hands-on network engineering across multi-site.
• Proven cyber-security experience in endpoint security, vulnerability management and patching.
• Practical mastery of Okta and Entra ID (Azure AD) – SSO, MFA, app integrations and lifecycle; exposure to Netskope/SASE.

Responsibilities

• Own network architecture across EMEA, including routing, switching, firewalls, VLANs, VPN and WiFi across offices and stores.
• Administer identity and access across Entra ID and Okta, with SSO/MFA integrations.
• Operate and monitor security tooling (CrowdStrike, Qualys, BitSight) and lead vulnerability management lifecycle.
• Support incident response and align security requirements with vendors and 3PLs.
• Provide secure connectivity prerequisites for SAP-centric strategy and global alignment.

Skills

Networking

Security & Endpoint

Identity & Access

Vulnerability management

Education

CISM Certification

Tools

CrowdStrike

Qualys

BitSight

Okta

Entra ID

Job description

Company: Retail Company

Position: Senior Network & Security Specialist

Contract: Permanent

Location: London

Salary: 55,000 - 60,000 GBP + 10% Bonus

1. Network & Connectivity

• Network architecture: Own and scale EMEA network routing, switching, firewalls, VLANs, VPN and WiFi across offices, showrooms, warehouses and retail stores.
• Store & warehouse networking: Deploy, monitor and optimise general store networking and cloud-managed equipment (e.g. Cisco Meraki firewalls, switches and wireless), including firewall lifecycle planning (e.g. Meraki MX end-of-life reviews and Fortinet options).
• Secure connectivity: Manage the regional SD-WAN model (currently vendor managed) and plan our specific arrangements, including secure network bridging to 3PL/warehouse environments.

2. Identity, Access & Zero Trust

• Identity & access management (Okta / Entra ID): Administer identity and access across Entra ID (Azure AD) and Okta, including SSO, MFA, application integrations and identity lifecycle, in coordination with HQ/our IAM programme.
• SASE / Netskope: Support the rollout and adoption of Netskope Private Access (SASE / zero-trust) to retire the legacy AEB-managed Cisco AnyConnect VPN for our users, working with HQ's Zero Trust and Network Infrastructure team.
• Access guardrails: Enforce network segmentation, IP whitelisting and firewall rules to align third-party and 3PL integrations with corporate cyber-security frameworks.

3. Cyber-Security, Endpoint & Vulnerability Management

• Vulnerability management portfolio: Own the our vulnerability management portfolio end to end — how our security risks and vulnerabilities are identified, prioritised, remediated and reported.
• Security tooling: Operate and act on tooling across the security estate, including CrowdStrike (endpoint detection & response), Qualys (vulnerability scanning) and BitSight (external attack surface / ESAM security ratings).
• Endpoint security & patching: Enforce endpoint protection, device compliance, encryption, and patching through Microsoft Intune / MDM and coordinated patch cycles across the fleet.
• Incident response: Act as a first responder for security events (lost/stolen devices, suspicious activity, containment) and support incident notification and contractual security requirements with vendors and 3PLs (e.g. penetration testing and incident-notification clauses).

4. Retail, Warehouse & Enterprise Backing

• Retail & logistics readiness: Provide network and security support for new store openings, refits and warehouse moves — secure LAN/WiFi, VLAN segmentation, RF/RFID and specialist hardware.
• SAP connectivity: Manage secure connectivity prerequisites for the SAP-centric strategy — RFC/print routing, secure paths and POS-to-ERP transaction flows.
• Global alignment: Partner with global architecture units to ensure European implementations conform to global security and network design baselines.

Experience

• Networking - 8+ years hands-on network engineering (routing, switching, firewalls, VLANs, VPN, WiFi) across multi-site.
• Security & Endpoint - Proven cyber-security experience specialised in endpoint security, vulnerability management, and patching, with practical use of CrowdStrike, Qualys and BitSight (ESAM).
• Identity & Access - Practical mastery of Okta and Entra ID (Azure AD) — SSO, MFA, app integrations, and identity lifecycle; exposure to Netskope / SASE and zero-trust models.
• Vulnerability management - Demonstrated ownership of a vulnerability management portfolio: scanning, risk prioritisation, remediation tracking, and reporting for our security vulnerabilities.
• CISM certified or actively grooming for CISM, strong grounding in security frameworks and controls.

We regret to inform applicants that only shortlisted candidates will be notified.

Thank you for understanding