Infrastructure Engineer - Firewall & Security - salary £46,160 p.a. + digital allowance + benefits

We are currently looking for an Infrastructure Engineer - Firewall & Security to join our Technology Service & Operations function within the Digital & Technology group.

This is a full-time opportunity, on a permanent basis. The role will be based in 10 South Colonnade, Canary Wharf London, E14 4PU or South Mimms, Hertfordshire. Please be aware that this role can only be worked in the UK and not overseas.

We are currently implementing a flexible, hybrid way of working, with a minimum of 8 days per month working on site to enable the collaboration and contact with partners and stakeholders needed to deliver MHRA business. Attendance on site is driven by business needs so depending on the nature of the role, this can flex up to 12 days a month, with the remainder of time worked either remotely or in the office. Some roles will need to be on site more regularly.

This role will also be required to participate in the Agency's out of hours on-call rota on a periodic basis. An on-call payment will be added to the salary depending on the frequency of participation in the rota., We plan to be at the heart of one of the most digitally advanced medical regulators in the world and we need people who can help us deliver that ambition. D&T is a great place to build your career and we are committed to enabling our people to do the best work of their lives.

The Technology & Service Operations function is responsible for managing the existing IT infrastructure including both software and hardware, databases, and other technology platforms; leading the support and maintenance of applications; development and testing of new applications and platforms; and cyber and information security for the Agency.

What's the role?

The Network Core Engineer will play a key role in managing and delivering network projects and BAU tasks, with a particular focus on critical areas such as the network core, data centres, and related infrastructure. This role is vital in ensuring the stability, performance, and security of the core network as the MHRA undergoes a significant overhaul of its IT infrastructure, including the deployment of new equipment in these critical areas.

The successful candidate will provide advanced expertise in core network technologies, working closely with both senior and junior engineers to ensure smooth operations and continuous improvement. You will act as an escalation point for more complex issues related to the network core and data centre environments, providing guidance and troubleshooting support to junior engineers when necessary. The role also involves collaborating with other teams to align core network initiatives with the overall IT strategy.

Key responsibilities:

This is a hands-on technical role where you will be expected to interact daily with core IT Infrastructure technologies. You are expected to be able to configure, manage and diagnose the IT Infrastructure components detailed in this advert.

Technical skills and IT systems we use:

We are undertaking a program of works that is focused on reducing our suppliers and vendors to ensure we can build skillsets around vendor technology stacks. This roll will require the technical skills in Cisco security systems and services.

• Be able to Deploy, manage and configure Cisco FTD firewalls via FMC in redundant configurations
• Be able to Manage and configure Cisco ISE
• Understand least privilege concepts and securing internet connected firewalls
• Running firewalls as a core and (optional) supporting micro segmentation of services from virtual platforms using FTD/FMC technologies
• Generally understand and be able to manage and deploy advanced FMC configuraqtions such as: OSFP, VLAN and VLSM in firewalls, NAT/PAT/S-NAT, Site to Site VPN's, ACL's and DACL's

Leadership and Escalation:

• Lead and manage the successful execution of core network projects, ensuring that they are delivered on time, within scope, and aligned with the MHRA's IT strategy.
• Serve as the main escalation point for junior network engineers, providing advanced troubleshooting and technical expertise in resolving complex core network and data centre issues, ensuring high-quality resolutions that prevent future incidents.
• Mentor and support junior engineers, fostering a collaborative environment and encouraging skills development across the team.

Core Network Stability, Security, and Performance:.

• Implement and maintain robust security protocols to safeguard core network infrastructure, ensuring compliance with security policies and regulatory requirements.
• Proactively monitor and assess core network performance, identifying potential risks or weaknesses and applying pre-emptive solutions to minimize downtime and service disruptions.
• Play a pivotal role in the agency's ongoing IT infrastructure overhaul by recommending, testing, and integrating cutting-edge core network technologies.

Collaboration and Stakeholder Management:

• Collaborate closely with the Lead Network Architect, project teams, and other IT functions to ensure that core network strategies are fully aligned with the overall IT infrastructure roadmap and broader organizational goals.
• Establish and maintain productive relationships with external vendors, ensuring their services and products meet the agency's performance, security, and contractual expectations.
• Engage with senior stakeholders and cross-functional teams to communicate project progress, core network performance, and ensure that business requirements are consistently met., Certain roles within the MHRA will require post holders to have vaccinations, and in some circumstances, routine health surveillance. These roles include:
• Laboratory-based roles working directly with known pathogens
• Maintenance roles, particularly those required to work in laboratory settings
• Roles that involve visiting other establishments where vaccination is required
• Roles required to travel overseas where specific vaccination may be required.

Applicants who are successful at interview will be, as part of pre-employment screening subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant's details held on the IFD will be refused employment. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

Any move to the MHRA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility here.

Successful candidates may be subject to annual Occupational Health reviews dependent on role requirements. If you have any queries, please contact careers@mhra.gov.uk., * UK nationals

• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Do you have experience in VPN?, * A track record of identifying deeper underlying problems and opportunities and anticipating problems before they occur.

• Experience of developing and maintaining relationships with suppliers, making sure services and products are delivered and aligned to industry best practice and regulatory and contractual requirements.
• Proven experience in managing and supporting enterprise network environments, particularly focusing on network core devices and infrastructure.
• Strong technical expertise in core network technologies, including LAN/WAN, data centre infrastructure, routing, switching, and network security.
• Proficiency in configuring and managing Cisco or similar network infrastructure, with experience in implementing security protocols and best practices.
• Hands-on experience with troubleshooting network performance issues and integrating new equipment within an existing IT architecture., Candidates will be subject to UK immigration requirements as well as Civil Service nationality rules. Further information on whether you are able to apply is available here.

Successful candidates must pass a disclosure and barring security check as well as animal rights and pro-life activism checks. People working with government assets must complete basic personnel security standard checks., Successful candidates must undergo a criminal record check. People working with government assets must complete baseline personnel security standard (opens in new window) checks.

A Digital Allowance of up to £12,823 per annum may be available for exceptional candidates based on our assessment of your skills and experience. This allowance is non-pensionable and may change on an annual basis., Alongside your salary of £46,160, Medicines and Healthcare Products Regulatory Agency contributes £13,372 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

• Annual Leave: 25 days annual leave on entry, rising by one day for each completed year of service to a maximum of 30 days and pro-rata for part-time staff. PLUS 8 bank holidays
• Privilege Leave: 1 day
• Hours of Work: 37 hours (net) per week for full time staff in all geographical locations, including London and pro rata for part-time staff
• Occupational Sick Pay (OSP): One month full pay/one month half pay on entry, rising by one month for each completed year of service to a maximum of five months full pay/five months half pay
• Mobility: Mobility clause in contracts allowing staff to be mobile across the Civil Service
• Civil Service Pension Scheme. Please see the link for further information http://www.civilservicepensionscheme.org.uk/ For enquiries relating to the Civil Service Pension Schemes please contact MyCSP's Pension Service Centre directly on 0300 123 6666
• Flexible working to ensure staff maintain a healthy work-life balance
• Interest free season ticket loan or bike loan
• Employee Assistance Services and access to the Civil Service Benevolent Fund
• Eligibility to join the Civil Service Motoring Association (CSMA)
• Variety of staff and Civil Service clubs
• On-going learning and development

The Medicines and Healthcare products Regulatory Agency enhance and improve the health of millions of people every day through the effective regulation of medicines and medical devices, underpinned by science and research. The Digital and Technology Group (D&T) lies at the heart of the Agency and is responsible for delivering an optimised IT infrastructure and maximising the secure use of data to enable our scientists, inspectors, and the rest of the organisation to deliver world class services which can improve outcomes for patients and the general public. The Group was essential in the race to approve COVID-19 vaccines in 2020 and in supporting the UK to set up its own medicines and devices approvals systems following our exit from the EU. The work we do matters!