Network Engineer

Network Engineer

Posted Today by Falcon Smart IT (FalconSmartIT)

Apply
Negotiable
Undetermined
Onsite
Guildford, England, United Kingdom
Apply
Ansible Authentications Authorisation (Computing) Cisco firePOWER Computer Hardware Data Centers Enterprise Network Security Enterprise Security Failover Firewall Management Network Address Translation Network Diagrams Network Security Nodes (Networking) Profiling (Computer Programming) Remote Authentication Dial In User Service (RADIUS) Single Sign-On (SSO) Tcpdump Verification And Validation Virtual Private Cloud Virtual Private Networks (VPN) Wireshark

Summary: The Network Engineer role is focused on designing, implementing, and troubleshooting enterprise security solutions, particularly in Cisco security technologies, Check Point firewalls, and F5 APM. The position requires extensive hands-on experience in security infrastructure operations, project support, and compliance with security standards. The ideal candidate will also engage in cross-team collaboration and mentoring of junior engineers. This is a contract position based in Guildford or Bournemouth, UK.

Key Responsibilities:

  • Manage, configure, and troubleshoot Cisco ISE, ASA/FTD firewalls, and Check Point firewalls.
  • Perform installation, configuration, and deployment of security devices.
  • Participate in designing secure network architectures and create documentation.
  • Troubleshoot network security issues and perform root-cause analysis.
  • Ensure compliance with security standards and conduct audits.

Key Skills:

  • Expertise in Cisco ISE, ASA/FTD, Check Point R80.x, and F5 APM.
  • Strong experience in enterprise Network Security (6–10+ years).
  • Excellent communication and documentation skills.
  • Analytical and troubleshooting capabilities.
  • Knowledge of automation/scripting (Python, Ansible) is preferred.

Salary (Rate): undetermined

City: Guildford

Country: United Kingdom

Working Arrangements: on-site

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Job Title: Network Engineer

Job Location: Guildford OR Bournemouth, UK/ Onsite

Job Type: Contract/FTC (6 months duration)

Job Description:

Senior Network Security Engineer (L4)

Role Overview

We are seeking a highly skilled L4 Network Security Engineer with deep expertise in Cisco security technologies, Check Point firewalls, and F5 APM. The ideal candidate will be responsible for designing, implementing, optimizing, and troubleshooting enterprise security solutions across multi-site and data center environments. This role requires hands-on experience in platform installations, upgrades, migrations, and decommissioning activities, along with strong troubleshooting and cross-team collaboration skills.

---

Key Responsibilities

  • Security Infrastructure Operations & Engineering
  • Manage, configure, and troubleshoot Cisco ISE (TACACS+, RADIUS, Dot1X, CoA, Profiling).
  • Administer and support Cisco ASA/FTD firewalls including ACLs, NAT, VPN, failover, clustering, and upgrades.
  • Manage Check Point firewalls (R80.x) — policy management, clustering, VPN, logging, and health checks.
  • Handle F5 APM for remote access VPN, SSO, authentication policies, and application access.
  • Support data center network security architecture (firewalls, segmentation, VRF, routing, switching security).
  • Implementation, Installations & Decommissioning
  • Perform installation, configuration, and deployment of security devices (ASA/FTD, Check Point, ISE nodes, F5 APM).
  • Lead hardware refresh, firewall replacement, and migration projects.
  • Execute device decommissioning, ensuring proper cleanup of configs, rule removal, rack removal, and documentation.
  • Conduct cutover activities, change execution, and post-implementation validation.
  • Project & Architecture Support
  • Participate in designing secure network architectures for enterprise and data center environments.
  • Work with cross-functional teams to review network and security requirements.
  • Create and maintain HLDs/LLDs, network diagrams, migration plans, and SOPs.
  • Security Operations & Troubleshooting
  • Act as L4 SME for escalations related to network security issues.
  • Troubleshoot identity/authentication failures, VPN issues, firewall packet drops, routing conflicts.
  • Perform root-cause analysis (RCA), remediation plans, and long-term fixes.
  • Monitor system health, logs, and alerts across multiple platforms.
  • Governance, Compliance & Best Practices
  • Ensure compliance with security standards (ISO 27001, NIST, PCI-DSS, CIS benchmarks).
  • Conduct periodic rule/policy optimization, cleanup, and audits.
  • Maintain device firmware/software to secure and supported versions.
  • Document operational procedures and provide knowledge transfer to L1/L2 teams.

---

Required Skills & Experience

Technical Skills

  • Cisco ISE (expert level) – Authentication policies, authorization profiles, profiling, certificates, device onboarding.
  • Cisco ASA/FTD – VPN, NAT, ACL, clustering, routing, packet tracer, Firepower Management Center (FMC).
  • Check Point R80.x – SmartConsole, VPN, IPS, rule optimization, HA/cluster.
  • F5 APM – Access policy creation, VPN configuration, SAML/OAuth integration.
  • Cisco Switching/Routing in DC environment – Nexus (5k/7k/9k), VLANs, VPC, OSPF/BGP basics.
  • Packet capture tools: Wireshark, tcpdump.
  • cloud networking (AWS/Azure) is a plus.
  • Automation/Scripting knowledge (Python, Ansible) preferred but not mandatory.

Experience

  • 6–10+ years of strong experience in enterprise Network Security.
  • Experience working in large, distributed, high-availability environments.
  • Proven track record of leading install, upgrade, migration, and decommission projects.
  • Experience in handling major Incidents and RCA documentation.

---

Soft Skills

  • Excellent communication and documentation skills.
  • Strong analytical and troubleshooting capability.
  • Ability to lead changes independently and collaborate with global teams.
  • Ability to mentor junior engineers.

Regards.

Rachana

rachana@falconsmartit.com

Apply
Similar Jobs
Loading data...