> Markdown version of [/jobs/ext/4574156-network-security-lead](https://www.wearedevelopers.com/jobs/ext/4574156-network-security-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# network security lead.

- **Company:** Randstad UK
- **Location:** London, UK
- **Experience:** Expert
- **Salary:** £70,000.0 - £80,000.0
- **Contract:** Permanent contract
- **Skills:** IEEE 802.1X, Amazon Web Services, Microsoft Azure, Backup Devices, Border Gateway Protocol, Big Data, Catalyst (Software), Computer Networks, Data Centers, Dynamic Multipoint Virtual Private Networks, Multi-Factor Authentication, Enhanced Interior Gateway Routing Protocol, Firmware, Hot Standby Router Protocol, Network Topologies, Identity and Access Management, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Python (Programming Language), Network Security, Network Architecture, Routing, Cisco Nexus Switches, Open Shortest Path First (OSPF), Overlay Transport Virtualization, Windows PowerShell, Ansible, Software Engineering, Wireless Access Point, Wireless Networks, Scripting, Transport Layer Security, Identity Services Engine, Computer Network Operations, HybridCloud, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), SDN Network, Fortinet, Routing & Switching, Restful APIs, Open Network Automation Platform, Cisco
- **Published:** November 5, 2026
- **Apply:** https://www.randstad.co.uk/jobs/network-security-lead_london_47707831/

## About the Role

We are seeking a senior, hands-on Network Security Lead with 8+ years of expertise spanning enterprise routing/switching, multi-vendor firewalls, Software-Defined Networking (SDN), and hybrid cloud connectivity., * Experience: Minimum 8 years of dedicated experience delivering and supporting enterprise-grade network and security operations.

 * Routing & Switching: Proven mastery of Cisco data center and campus platforms (Catalyst, Nexus) and industry routing protocols (BGP, OSPF, VXLAN).
 * ️ Network Security: Deep hands-on engineering background with next-generation firewalls (Palo Alto, Fortinet, or Cisco FTD) and enterprise VPN architectures (IPsec, SSL).
 * Identity & NAC: Practical deployment and troubleshooting experience with Cisco ISE or comparable 802.1X authentication systems.
 * Security Clearance: Must hold active BPSS clearance or be fully eligible to undergo BPSS pre-employment screening., * Prior experience in high-level or low-level Network Architecture & Design.
 * ️ Enterprise Cloud Networking experience across AWS, Azure, or GCP (e.g., Transit Gateways, DirectConnect/ExpressRoute, Virtual Appliances).
 * Scripting capability for network automation (Python, REST APIs, Ansible).
 * Professional certifications: CCNP / CCIE (Enterprise or Security), PCNSE, or equivalent vendor accreditation.

## Description

In this role, you will act as the principal L3 technical escalation authority and operational lead across our secure network estate. You will drive high-availability network operations, lead major incident resolution, enforce rigorous security posture, and champion compliance within BPSS-governed and enterprise-scale environments., * Serve as the senior Subject Matter Expert (SME) and primary escalation point for L3 network and security incidents, troubleshooting complex multi-technology outages through to root cause analysis (RCA).

 * Oversee enterprise incident, change, and problem management processes, ensuring strict alignment with SLAs, operational resilience, and Change Advisory Board (CAB) governance.
 * Lead scheduled hardware/software lifecycle upgrades, firmware patching, and configuration hardening across all edge, campus, and core infrastructure.
 * Provide escalation coverage within a 24/7 operational framework, participating in on-call rotations and critical response scenarios.

Network Security, Firewalls & Access Control

 * Administer, tune, and harden enterprise perimeter and internal firewalls across Palo Alto (PAN-OS), Fortinet (FortiGate), Cisco FTD, and Cisco Meraki.
 * Design, deploy, and support enterprise Network Access Control (NAC) via Cisco ISE, covering 802.1X policy enforcement, posture assessment, guest access, and multi-factor authentication (MFA) integrations.
 * Monitor vulnerability advisories, evaluate threat profiles, execute remediation programs, and maintain adherence to audit baselines and BPSS (Baseline Personnel Security Standard) standards.

Core Routing, Switching & Infrastructure Operations

 * Configure, optimize, and troubleshoot large-scale data center and enterprise campus fabrics, including Cisco Nexus, Aruba, Dell, and HP hardware estates.
 * Maintain advanced routing and data center protocols, including BGP, OSPF, EIGRP, VXLAN/EVPN, DMVPN, HSRP/GLBP, and VPC.
 * Manage enterprise wireless infrastructures across Cisco, Aruba, and Meraki controllers and access points, ensuring optimized RF coverage and guest/corporate network isolation.

️ Governance, Continuous Improvement & Mentorship

 * Identify and build operational automation scripts using Python, PowerShell, or Ansible to streamline routine configurations, backups, and health checks.
 * Maintain clear operational documentation, Standard Operating Procedures (SOPs), network topologies, and knowledge-transfer repositories.
 * Mentor, train, and guide mid-level network and security engineers, promoting best practices in technical governance and customer stakeholder communication.