Senior Security Consultant

OpticoreIT Limited; Greater London; Hybride; GBP 90 000 - 120 000; Plein temps

Résumé du poste

Opticore IT is recruiting a Senior Security Engineer for a 6-month contract in Central London, working 2 days per week on-site. You will lead the design and delivery of a new firewall governance framework, focusing on Cisco FTD and FortiGate estates, with risk-based remediation and policy-as-code initiatives.

You will engage with Technology Risk and the CISO office, produce ownership models, RACI, and warranty documentation, and drive change control in a regulated financial services environment.

Qualifications

• Experience designing firewall governance models and operating models.
• Proven ability to remediate firewall rule bases and drive risk-based recertification.
• Strong stakeholder engagement across second line and risk teams.

Responsabilités

• Lead design of firewall governance framework for banking client.
• Review policies, reports, CMDB ownership data to establish current state.
• Define rule design standards for Cisco FTD and FortiGate and data model for Policy as Code.
• Deliver workshops, onboarding packs, and support sign-off with Technology Risk and CISO office.
• Map rules to business units and validate ownership with BU stakeholders.
• Remediate wide and overly permissive rules with risk-based approach and document changes.

Connaissances

Cisco FTD/FMC FortiGate

Firewall governance

Policy as Code

Stakeholder engagement

Change control in FS environments

Outils

AlgoSec Firewall Analyzer

Ivanti

Cisco FTD

FortiGate

Description du poste

Opticore IT is a specialist Network Engineer and Project Management consultancy offering a wide variety of opportunities to work within fast-paced,challenging environments across our client base spanning multiple sectors including Finance, Broadcast Media, Telecommunications and more.

Opticore IT are currently searching for a SeniorSecurity Engineerwho is confident working with Fortigate to join the team for an initial 6 month contract inside IR35 with scope to extend. This opportunity will require 2 days per week in Central London.

Lead the design, business agreement and hands on delivery of a new firewall governance framework for the bank, acting as design authority while reviewing and remediating a Cisco FTD and FortiGate estate of around 4,000 rules so that every rule has a clear owner, purpose and review date, and laying the foundation for Firewall Policy as Code.

What you’ll be doing:

• Review the bank's current firewall policies, AlgoSec reports, Ivanti request and change processes, and CMDB ownership data to establish the current state.
• Design the firewall operating model, covering roles, governance forums, policy hierarchy, exceptions and risk acceptance, and KPIs.
• Produce the ownership model and RACI, the request, change and continuous risk based recertification procedures, and the Ivanti firewall request catalogue item design.
• Tailor the Rule Design Standard to Cisco FTD and FortiGate, and define a vendor neutral rule schema that forms the data model for Policy as Code.
• Deliver BU workshops in London, write the BU onboarding pack, and support second line review with Technology Risk and the CISO office through to sign off.
• Analyse the full rule base in AlgoSec Firewall Analyzer, establish a measured baseline and risk rank the findings.
• Map rules to business units and service owners using the Ivanti CMDB, validate ownership with each BU, and investigate orphaned rules for risk acceptance.
• Remove unused, shadowed, redundant and expired rules through change packs with rollback plans, implemented out of hours under the bank's change control.
• Remediate wide and overly permissive rules in risk order, using Elastic traffic logs (including month end and quarter end) to design explicit replacement rules, validate failover paths, then monitor, disable and remove the original rules.
• Record every remediated and new rule in the vendor neutral format, and produce interim and final segmented reports showing each BU its rules and risk.
• Run a pilot recertification cycle with one BU, align DC Refresh firewalls with the framework, and deliver the Policy as Code high level design, close out report and stakeholder handover

What you’llbring:

• Cisco FTD/FMC & FortiGate Firewall Engineering
• Firewall Rule Base Review & Remediation
• Firewall Governance & Operating Model Design
• Change Control in Regulated / Financial Services Environments
• Business & Second Line Stakeholder Engagement

Diversity:

At Opticore IT we embrace diversity and are committed to equal opportunities. We actively recruit for an inclusive and diverse workforce and as such, want to ensure we do everything we can to support your application.

We want you to feel empowered to let us know if you require any adjustments to be made with your application or interview process so please speak to our recruitment team.