Network Security Engineer

• We partner with internal stakeholders and technology vendors to evaluate, select, and implement Zero Trust security solutions.
• We design and engineer scalable, resilient, and secure enterprise network and security architectures.
• We collaborate across Network Engineering, Security Engineering, IAM, Cloud, EUC, and Operations teams to deliver security transformation initiatives.
• We contribute to technical strategy, standards, reference architectures, and design patterns.
• We deliver solutions tailored to internal business requirements, articulate design rationale, adapt solutions flexibly, and iterate designs when required.
• We develop High-Level Designs (HLD), Low-Level Designs (LLD), migration plans, operational procedures, and architecture documentation.
• We support vendor evaluations, Proofs of Concept (PoCs), pilot deployments, and production rollouts.
• We lead technical assessments, architecture reviews, root cause analysis, and engineering recommendations.
• We design, deploy, and operate Palo Alto, Fortinet, or Cisco NGFW platforms and their cloud management tools.
• We design and implement SASE/SSE solutions for enterprise-scale deployments.
• We implement centralized security management, policy governance, logging, monitoring, and reporting using vendor ecosystems or tools such as Tufin or Algosec.
• We design and implement on-premises Zero Trust Enforcement Points (NGFW).
• We develop segmentation and micro-segmentation strategies across data centres, campuses, cloud, and branch environments.
• We define secure traffic flows and trust boundaries.
• We support migration from traditional network-centric security models to Zero Trust architectures.
• We handle routers, switches, and LAN/WAN design and engineering.
• We work with VPN technologies, IPSec, TLS encryption, and NAC integration.
• We integrate network security solutions with Microsoft Entra ID, Active Directory, Cisco ISE/NAC platforms, EDR/XDR solutions, SIEM platforms, ServiceNow, and cloud platforms such as Azure, AWS, and GCP.

Technologies:

• AI
• AWS
• Active Directory
• Azure
• Cloud
• Cisco
• Firewall
• GCP
• IAM
• Support
• LAN
• Network
• Security
• ServiceNow
• VPN
• MPLS
• Nexus
• Spark

• We require 8+ years of experience in Network Security Engineering and Enterprise Networking.
• We require demonstrated experience designing and implementing SASE/SSE, ZTNA, network segmentation, identity-based access controls, and enterprise firewall architectures.
• We require a strong understanding of Zero Trust Architecture principles.
• We require the ability to produce technical assessments, architecture reviews, PoCs, migration strategies, and engineering documentation.
• We require strong troubleshooting and root cause analysis capabilities.
• We require excellent written and verbal communication skills.
• We prefer Palo Alto or Fortinet certifications.
• We prefer CCNP Enterprise/Security, CCIE Enterprise Infrastructure/Security, or CISSP.
• We prefer experience within large-scale financial services environments.
• We prefer knowledge of NIST Zero Trust Architecture, DORA, NIS2, and modern cybersecurity frameworks.

We are a $13+ billion global technology company with more than 224,000 people across 60 countries, delivering capabilities in digital, engineering, cloud, and AI through a broad portfolio of technology services and products. We are a globally recognized leader in the Tech and IT industry, and we keep a startup mindset built on idea-first thinking and innovation. This role is for a Network Security Engineer/Network Consultant based in London, UK, with a hybrid schedule of 3 days working from the office. It is a fixed-term contract role.