Network Security Engineer

AxiaMetrics is recruiting a Senior Network Security Engineer for an enterprise client. You will design, implement and support network security across complex on-premises, cloud and hybrid environments, lead security improvement initiatives and drive the adoption of Zero Trust networking.

KEY SKILLS - Enterprise Firewalls: Palo Alto, Check Point, Cisco Firepower, Fortinet FortiGate, Juniper SRX - Azure network security: Azure Firewall, NSGs, Application Gateway, DDoS Protection, Virtual WAN, ExpressRoute, Private Endpoints - AWS network security: Security Groups, NACLs, Transit Gateway, Network Firewall, WAF, Shield, Direct Connect, VPC - Zero Trust, ZTNA, SASE, SDP and micro-segmentation - Routing and switching: BGP, OSPF, MPLS, VLANs, high availability - Automation: Python, PowerShell, Terraform, Ansible

THE ROLE - Design, implement and maintain enterprise network security architectures aligned to Zero Trust principles - Deploy and administer Firewall platforms, including policy, NAT and access control configuration - Lead Firewall rule optimisation and recertification exercises - Design and secure Azure and AWS network architectures and hybrid connectivity - Implement micro-segmentation, ZTNA and SASE solutions to reduce lateral movement risk - Implement and support site-to-site, client, IPSec and SSL VPNs and remote access solutions - Investigate network-based security incidents and analyse logs and traffic, working with the SOC using Sentinel, Splunk, QRadar, Cortex XDR, CrowdStrike or Darktrace - Run vulnerability assessments, support penetration testing and own remediation plans - Lead security assessments and architecture reviews for new projects - Ensure compliance with ISO 27001, NIST CSF, CIS Controls, GDPR and Cyber Essentials Plus, and support audits - Produce architecture designs, Firewall review reports, segmentation strategies, Zero Trust roadmaps, risk assessments and operational runbooks

REQUIRED EXPERIENCE - 7-10+ years in network security engineering - Strong hands-on experience managing enterprise Firewall platforms - Experience securing complex enterprise and cloud environments, including critical production systems - Proven delivery of network segmentation and Zero Trust initiatives - Knowledge of IDS/IPS, WAF, DDoS protection, secure web gateways, NAC and DNS security - Strong troubleshooting, stakeholder and vendor management skills, with the ability to work under pressure - Background in a regulated sector such as financial services, insurance, healthcare, telecoms, energy and utilities, retail or the public sector is an advantage.