Security Engineer

• Implement and maintain security controls across on-premise VMware infrastructure.
• Lead the configuration and optimisation of VMware NSX, distributed firewall policies and micro-segmentation.
• Work with VMware vDefend to support zero-trust principles and reduce lateral movement risk.
• Configure and manage Palo Alto next-generation firewalls, including policy creation, threat-prevention profiles, NAT and VPNs.
• Secure Windows Server, Active Directory and Group Policy environments in line with recognised security standards.
• Apply CIS Benchmarks, STIGs and other system-hardening standards.
• Support security monitoring, logging, alerting and incident response using Elastic Stack and Elastic Security.
• Contribute to vulnerability management, root-cause analysis and remediation activity.
• Support security controls across VMware Cloud Foundation, AWS, Azure and GCP.
• Embed security into operational processes and DevSecOps practices.
• Work closely with engineering teams, vendors, auditors and internal stakeholders.

• Strong hands-on experience within security engineering, infrastructure security or network security.
• Proven VMware NSX experience, including micro-segmentation and distributed firewall policies.
• Experience with VMware vDefend or closely related VMware security technologies.
• Strong Palo Alto firewall experience.
• Good Cisco networking and security knowledge.
• Extensive Windows Server, Active Directory and Group Policy security experience.
• Experience applying CIS Benchmarks or similar hardening standards.
• Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture.
• Experience with vulnerability management, SIEM, logging and incident response.
• Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity.
• Experience with Elastic Stack or Elastic Security would be highly advantageous.
• Exposure to cloud security, DevSecOps, Linux hardening, container security or regulated government environments would also be useful.

• £75,000-£90,000 depending on experience
• Bonus and Company Benefits
• Full-time position
• Five days per week onsite in Manchester
• Occasional UK travel may be required.
• Active UK government SC clearance required.
• Candidates must be willing and eligible to undergo Developed Vetting.

Richmond Square Consulting is working with a growing technology business to recruit an experienced Security Engineer for a highly secure, regulated environment. This is a genuinely hands-on engineering role focused primarily on securing complex on-premise infrastructure, alongside hybrid-cloud environments. It would suit somebody with strong experience across VMware NSX, enterprise firewalling, Windows security and network segmentation who enjoys implementing and improving security controls rather than simply producing policies or architecture documents.