Senior Network Security Engineer
AxiaMetrics is recruiting a Senior Network Security Engineer for an enterprise client. You will design, implement and support network security across complex on-premises, cloud and hybrid environments, lead security improvement initiatives and drive the adoption of Zero Trust networking.
KEY SKILLS
- Enterprise Firewalls: Palo Alto, Check Point, Cisco Firepower, Fortinet FortiGate, Juniper SRX
- Azure network security: Azure Firewall, NSGs, Application Gateway, DDoS Protection, Virtual WAN, ExpressRoute, Private Endpoints
- AWS network security: Security Groups, NACLs, Transit Gateway, Network Firewall, WAF, Shield, Direct Connect, VPC
- Zero Trust, ZTNA, SASE, SDP and micro-segmentation
- Routing and switching: BGP, OSPF, MPLS, VLANs, high availability
- Automation: Python, PowerShell, Terraform, Ansible
THE ROLE
Design, implement and maintain enterprise network security architectures aligned to Zero Trust principles
Deploy and administer Firewall platforms, including policy, NAT and access control configuration
Lead Firewall rule optimisation and recertification exercises
Design and secure Azure and AWS network architectures and hybrid connectivity
Implement micro-segmentation, ZTNA and SASE solutions to reduce lateral movement risk
Implement and support site-to-site, client, IPSec and SSL VPNs and remote access solutions
Investigate network-based security incidents and analyse logs and traffic, working with the SOC using Sentinel, Splunk, QRadar, Cortex XDR, CrowdStrike or Darktrace
Run vulnerability assessments, support penetration testing and own remediation plans
Lead security assessments and architecture reviews for new projects
Ensure compliance with ISO 27001, NIST CSF, CIS Controls, GDPR and Cyber Essentials Plus, and support audits
Produce architecture designs, Firewall review reports, segmentation strategies, Zero Trust roadmaps, risk assessments and operational runbooks
REQUIRED EXPERIENCE
7-10+ years in network security engineering
Strong hands-on experience managing enterprise Firewall platforms
Experience securing complex enterprise and cloud environments, including critical production systems
Proven delivery of network segmentation and Zero Trust initiatives
Knowledge of IDS/IPS, WAF, DDoS protection, secure web gateways, NAC and DNS security
Strong troubleshooting, stakeholder and vendor management skills, with the ability to work under pressure
Background in a regulated sector such as financial services, insurance, healthcare, telecoms, energy and utilities, retail or the public sector is an advantage.
2 days a week remote