About this role
Salary: £? - ? per year
Requirements
- Proven experience designing, deploying and optimising Cisco Secure Network Analytics (SNA) environments.
- Strong technical knowledge of NetFlow, syslog, Flow Managers, Flow Collectors and UDP Directors.
- Experience with network traffic analytics, security monitoring and behavioural detection.
- Strong Cisco enterprise networking and network security expertise.
- Experience improving telemetry collection, network visibility and monitoring architectures.
- Ability to design scalable, resilient and highly available network analytics platforms.
- Desirable: Network automation using Python, Ansible, Terraform or REST APIs; automation of NetFlow and syslog configuration; Git and CI/CD workflows; HAProxy, load balancing and high-availability architectures; UDP traffic distribution and Flow Collector scalability; hybrid cloud networking and east-west traffic monitoring.
Responsibilities
- Assess the existing Cisco SNA architecture, configurations, integrations and telemetry collection.
- Design and deploy a replacement Cisco SNA infrastructure using procured hardware and software.
- Configure and optimise Flow Managers, Flow Collectors and UDP Directors.
- Migrate existing configurations and data sources, ensuring platform functionality and resilience.
- Evaluate load-balancing and high-availability solutions, including HAProxy and alternatives.
- Review global NetFlow and syslog coverage, identify gaps, and develop strategies to improve visibility, especially for east-west traffic.
- Design scalable telemetry collection, forwarding and distribution architectures across campus, data centre and hybrid cloud environments.
- Identify opportunities to automate NetFlow and syslog deployment.
- Tune Cisco SNA security policies, behavioural analytics, alarms and detection thresholds; establish traffic baselines, host groups and network classifications.
- Reduce false positives and alert fatigue while improving threat detection; optimise telemetry ingestion, data retention and platform performance.
- Collaborate with Network Reliability Engineering and Security teams to develop monitoring use cases.
- Produce architecture diagrams, technical documentation and operational procedures, and deliver knowledge transfer and operational handover to internal engineering teams.
- Deliver an assessment of the existing environment, a redesigned operational platform, optimised analytics and alerting, improved global NetFlow and syslog coverage, and an east-west visibility strategy and roadmap.
- Recommend Flow Collector load-balancing and high-availability approaches.
Technologies
- Ansible
- CI/CD
- Cloud
- Cisco
- Flow
- Git
- Hardware
- Load Balancing
- Network
- Python
- REST
- Security
- Terraform
- DevOps
- Support
More
We are seeking a Cisco Secure Network Analytics consultant for a major network visibility and security analytics improvement programme at a leading global technology organisation. The role supports the redesign, implementation and optimisation of a global monitoring environment across a complex network. It is based in Cambridge with hybrid working, pays £500–£540 per day, is inside IR35, and is offered as a 12-month contract.
last updated 45 week of 2026