About this role
Salary: £55,000 - 66,000 per year
Requirements: 8+ years of hands-on network engineering experience across multi-site environments, including routing, switching, firewalls, VLANs, VPN and WiFi.Proven cybersecurity experience specialising in endpoint security, vulnerability management and patching, with practical experience using CrowdStrike, Qualys and BitSight (ESAM).Practical mastery of Okta and Entra ID (Azure AD), including SSO, MFA, application integrations and identity lifecycle management; exposure to Netskope, SASE and zero-trust models.Demonstrated ownership of a vulnerability management portfolio, including scanning, risk prioritisation, remediation tracking and reporting.CISM certified or actively working toward CISM certification, with a strong grounding in security frameworks and controls. Responsibilities: Own and scale our EMEA network routing, switching, firewalls, VLANs, VPN and WiFi across offices, showrooms, warehouses and retail stores.Deploy, monitor and optimise store networking and cloud-managed equipment, including Cisco Meraki firewalls, switches and wireless; plan firewall lifecycles, including Meraki MX end-of-life reviews and Fortinet options.Manage our regional SD-WAN model and plan secure network bridging to third-party logistics (3PL) and warehouse environments.Administer identity and access across Entra ID (Azure AD) and Okta, including SSO, MFA, application integrations and identity lifecycle, in coordination with HQ and our IAM programme.Support the rollout and adoption of Netskope Private Access to replace the legacy AEB-managed Cisco AnyConnect VPN, working with HQs Zero Trust and Network Infrastructure team.Enforce network segmentation, IP whitelisting and firewall rules to align third-party and 3PL integrations with corporate cybersecurity frameworks.Own our vulnerability management portfolio end to end, including identifying, prioritising, remediating and reporting security risks and vulnerabilities.Operate security tools across our security estate, including CrowdStrike, Qualys and BitSight, and act on their findings.Enforce endpoint protection, device compliance, encryption and patching through Microsoft Intune/MDM, coordinating patch cycles across our fleet.Respond to security events, including lost or stolen devices and suspicious activity; support containment, incident notifications and contractual security requirements with vendors and 3PLs.Provide network and security support for new store openings, refits and warehouse moves, including secure LAN/WiFi, VLAN segmentation, RF/RFID and specialist hardware.Manage secure connectivity prerequisites for our SAP-centric strategy, including RFC/print routing, secure paths and POS-to-ERP transaction flows.Partner with global architecture units to ensure European implementations conform to global security and network design baselines. Technologies: AzureCloudCiscoERPFirewallHardwareIAMSupportLANMicrosoft IntuneNetworkSAPSecurityVPN More:
We are a retail company hiring a Senior Network & Security Specialist on a permanent basis in London. The salary is £55,000–£60,000 GBP, plus a 10% bonus. Only shortlisted candidates will be notified.
last updated 40 week of 2026