Network Security & Infrastructure Engineer

This hands-on, senior role requires the design, implementation and administration of enterprise network, security and infrastructure solutions, as well as providing expert third-line support and guidance to colleagues and key stakeholders. Working as part of a small, collaborative team, the role will lead projects and support continuous service improvement.

Client Details

The hiring organisation is a well-established company within the FMCG industry. It operates on a large scale, providing quality products and services to a diverse customer base. They are committed to leveraging technology to maintain and improve their operational excellence

Description

* Own SolarWinds monitoring alerting, and reporting; integrate with Splunk for observability

* Manage Cisco and Meraki licensing, support, and life cycle (incl. CX Cloud Collector)

* Maintain accurate documentation for IP address plans, DNS/DHCP/forwarding, and structured cabling

* Administer NetApp support contracts for Milestone and Hikvision platforms

* Configure and operate Cisco C9200/C9300 access/core Switches, Nexus, and UCS fabrics

* Manage intersite WAN, Internet circuits, DMZ transit, guest networks, SIP, and L2 pseudo WAN connections

* Engineer and manage Get VPN Routers, certificate Servers, and site-to-site/remote VPNs

* Integration/admin of RADIUS/AAA across devices

* Own ASA Firewall (DMZ), Cisco Firepower/FMC (edge security), user policies, outbound/inbound/NAT rules, TALOS

* Administer DUO MFA for VPN/admin access

* Enforce wired/wireless 802.1X/MAB standards and Identity Services Engine (ISE) configurations

* Maintain certificate management (PKI; device/user/VPN/GetVPN/ISE certs)

* Support UCS/Fabric Interconnects, ISE and Firepower Servers, SolarWinds, NetApp storage

* Operational support for Milestone and Hikvision NVR platforms

* Administer and support IP CCTV platforms: Milestone, Hikvision, PoE cameras, ANPR, facial recognition

* Support Cisco video conferencing, Miracast, Extron controls, media conversion, wall screens, and streaming feeds

* Maintain high-quality and current documentation

* Participate in project management and continuous service improvement

* Adhere to security, data protection, and evidence handling policies

Profile

* CCNP-level knowledge (switching, routing, ISE, VPN/GetVPN)

* Strong Cisco switching (C9200/C9300/Nexus), routing, VLANs, STP, EtherChannel, HSRP/VRRP, QoS

* Advanced Firepower (FMC/FTD) & ASA with secure policy design, NAT, VPNs, TALOS

* Meraki (MR/AP, MX) multi-SSID management and enterprise authentication (802.1X/IPSK/MAB)

* SolarWinds administration and Splunk integration

* DNS/DHCP/IPAM and IPv4 subnetting

* WAN/MPLS & L2 circuits, DMZ, SIP, site-to-site VPNs, remote access

* UCS fabrics basics, NetApp video storage familiarity

* RADIUS/AAA, wired/wireless 802.1X and MAB, ISE policy sets, profiling, dACLs, and guest portals

* Certificate/PKI management (VPN, ISE/EAP-TLS, GetVPN)

* DUO MFA admin and device integration

* CCTV: Milestone/Hikvision, hands-on incident evidence handling

* AV: Cisco VC, Extron programming, media conversion, wall screens

* Core electronics fault-finding and structured cabling knowledge

* Excellent Wireshark and troubleshooting aptitude

Job Offer

Competitive Salary

Discretionary annual bonus of approximately one month's salary

25 days annual leave, rising to 28 days with service

On site staff restaurant (fully subsidised),

Defined contribution pension scheme (min. 3% employee, fixed 5% employer),

Salary Extras discount scheme, including Cycle to Work

Discounted Watch Purchase Scheme