About this role
Salary: £70,000 - 75,000 per year
Requirements
- Strong knowledge of TCP/IP, DNS, DHCP, NAT, TLS, HTTP/S, static and dynamic routing (BGP, OSPF), VRFs, and network segmentation.
- Hands-on experience administering enterprise next-generation firewalls, including policies, NAT, VPNs, security profiles, upgrades, patching, and rule recertification.
- Advanced troubleshooting using packet captures, logs, and monitoring tools, including diagnosis of asymmetric routing, MTU, authentication, and application connectivity issues.
- Experience with Palo Alto or Fortinet platforms; familiarity with Panorama, FortiManager, FortiAnalyzer, SASE solutions, and F5 or equivalent load balancers is preferred.
- Desirable: AWS or Azure networking, vulnerability management (Tenable), email security (Mimecast), scripting or automation (Python, PowerShell, APIs), and ITIL or vendor certifications (PCNSE, NSE, CCNA/CCNP).
- Security Check (SC) clearance required.
Responsibilities
- Support security infrastructure and firewalls in line with ITIL incident, request, problem, and change management practices.
- Triage, diagnose, remediate, and close incidents; escalate issues with supporting evidence when needed.
- Translate requirements into support actions and deliver controlled production changes with peer review, testing, and rollback plans.
- Conduct root-cause analysis of recurring issues and implement preventative solutions.
- Coordinate technical escalations with vendors, managed service providers, and internal IT and security teams.
- Maintain configurations, asset records, runbooks, and diagrams; apply least-privilege principles and support audit compliance in a regulated environment.
Technologies
- AWS
- Azure
- HTTP
- Support
- ITIL
- NAT
- Network
- PowerShell
- Python
- Security
- TCP/IP
- Cloud
- Firewall
More
We are recruiting for a mid-level Network Security Engineer in our Security Support team. The role focuses on maintaining the availability, security, and operational health of our enterprise network security estate, particularly firewalls and SASE services. Coverage is between 08:00 and 18:00 on a shift rota, with occasional out-of-hours maintenance as required.
last updated 44 week of 2026