Network & Security Engineer

Planet Recruitment
Didcot, United Kingdom
8 days ago

Role details

Contract type
Temporary contract
Employment type
Full-time (> 32 hours)
Working hours
Shift work
Languages
English
Experience level
Senior
Compensation
£ 109K

Job location

Remote
Didcot, United Kingdom

Tech stack

Proxmox
IEEE 802.1X
Amazon Web Services (AWS)
Azure
Ubuntu (Operating System)
Cisco PIX
Cloud Computing
Configuration Management
Computer Security
Data Centers
Information Technology Operations
IP Address Management
Network Security
Linux System Administration
Linux Servers
Windows Server
Network Diagrams
Package Management Systems
Powershell
Ansible
Virtualization Technology
Wide Area Networks
Datadog
Network Switches
Scripting (Bash/Python/Go/Ruby)
Identity Services Engine
Multi-Cloud
HybridCloud
IronPort
Routing & Switching
Firepower
Cisco networks

Job description

Our client are looking for an experienced, fully hands-on Level 3 engineer to strengthen our infrastructure and network security operations capability. This is a senior technical delivery role - not a design-only or advisory position. You will be expected to configure, troubleshoot, and resolve complex issues across Cisco security suite, networking, security appliances, server infrastructure, and hybrid-cloud connectivity with minimal supervision.

The environment spans a multi-building campus network, data-centre infrastructure, SD-WAN fabric, cloud gateway controllers, and enterprise security platforms. You will work closely with leaders in IT Operations to maintain service availability and to assist in fast tracking their infrastructure transformation., Network Engineering & Operations

  • Configure, deploy, and troubleshoot campus and data-centre 100Gbps switching
  • Execute network switch rollouts including hardware racking, cabling to standard, patch-panel termination, and fibre patching.
  • Perform structured cabinet clean-ups: re-patching copper and fibre runs, labelling, cable management, and documentation updates.
  • Support and maintain the eBGP routing fabric across multiple sites
  • Configure and monitor QoS profiles for mixed multigigabit, 10G/100G, and uplink interfaces.

Security Infrastructure

  • Fast track our implementation of a 5 node Cisco Identity Services Engine (ISE) build for 802.1X, RADIUS, MAB, and posture policy enforcement.
  • Manage Cisco Secure Email (formerly IronPort/ESA) including message tracking, content filters, outbreak filters, DLP policies, and quarantine management.
  • Support enterprise firewall platforms including rule-set changes, tunnel maintenance, and policy audits.

SD-WAN & Hybrid Cloud

  • Support and maintain Cisco SD-WAN (vManage/vSmart/vBond) fabric, including device onboarding, template management, and policy configuration.
  • Assist with Cloud OnRamp for Multicloud connectivity (AWS / Azure), including gateway controller health checks and tunnel monitoring.
  • Troubleshoot overlay/underlay issues, BFD sessions, OMP route propagation, and control-plane connectivity.

Server & Infrastructure Maintenance

  • Perform scheduled server patching and updates across Windows Server environments
  • Apply Linux server updates and patches where required (Ubuntu) - desirable but not essential.
  • Support virtualisation platforms (Proxmox) for routine maintenance tasks during out-of-hours windows.

Documentation & Standards

  • Maintain accurate network diagrams, IP address management records, and change-log documentation.
  • Follow and contribute to standard operating procedures, change-management processes, and post-implementation reviews.
  • Provide clear handover notes and shift reports for weekday engineering teams.

Requirements

  • CCNP Routing & Switching / Enterprise (current or expired with demonstrable expert-level knowledge).
  • Strong hands-on experience with Cisco ISE deployment, policy configuration, and troubleshooting.
  • Proven experience administering Cisco Secure Email / IronPort (ESA/SMA).
  • Solid working knowledge of enterprise firewall management (Cisco ASA, Firepower/FTD, or comparable).
  • Experience with Cisco SD-WAN (Viptela) architecture, including vManage operations and C8000-series router onboarding.
  • ENSDWI trained or demonstrably operating at that level across SD-WAN, security, and wireless integration.
  • Comfortable with physical infrastructure work: racking, stacking, copper/fibre patching, and cabinet standards.
  • Windows Server patching and administration experience.
  • Methodical approach to change management and documentation.
  • Willing to work on-site at Milton Park on a weekend or flexible shift pattern as outlined above.

DESIRABLE SKILLS

  • Linux server administration (Ubuntu) - patching, package management, systemd services.
  • Cisco CCIE written or lab (any track) - indicative of depth of knowledge.
  • Experience with hybrid-cloud gateway controllers and Cloud OnRamp (AWS, Azure).
  • Virtualisation platform experience (Proxmox).
  • Familiarity with network observability and monitoring tooling (e.g., Datadog).
  • Scripting/automation skills (Ansible, PowerShell) for network or server tasks.

About the company

Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer.

Apply for this position