Network Security & Infrastructure Engineer

This hands-on, senior role requires the design, implementation and administration of enterprise network, security and infrastructure solutions, as well as providing expert third-line support and guidance to colleagues and key stakeholders. Working as part of a small, collaborative team, the role will lead projects and support continuous service improvement.

Client Details

The hiring organisation is a well-established company within the FMCG industry. It operates on a large scale, providing quality products and services to a diverse customer base. They are committed to leveraging technology to maintain and improve their operational excellence

Description

* Own SolarWinds monitoring alerting, and reporting; integrate with Splunk for observability

* Manage Cisco and Meraki licensing, support, and lifecycle (incl. CX Cloud Collector)

* Maintain accurate documentation for IP address plans, DNS/DHCP/forwarding, and structured cabling

* Administer NetApp support contracts for Milestone and Hikvision platforms

* Configure and operate Cisco C9200/C9300 access/core switches, Nexus, and UCS fabrics

* Manage intersite WAN, internet circuits, DMZ transit, guest networks, SIP, and L2 pseudo WAN connections

* Engineer and manage Get VPN routers, certificate servers, and site-to-site/remote VPNs

* Integration/admin of RADIUS/AAA across devices

* Own ASA firewall (DMZ), Cisco Firepower/FMC (edge security), user policies, outbound/inbound/NAT rules, TALOS

* Administer DUO MFA for VPN/admin access

* Enforce wired/wireless 802.1X/MAB standards and Identity Services Engine (ISE) configurations

* Maintain certificate management (PKI; device/user/VPN/GetVPN/ISE certs)

* Support UCS/Fabric Interconnects, ISE and Firepower servers, SolarWinds, NetApp storage

* Operational support for Milestone and Hikvision NVR platforms

* Administer and support IP CCTV platforms: Milestone, Hikvision, PoE cameras, ANPR, facial recognition

* Support Cisco video conferencing, Miracast, Extron controls, media conversion, wall screens, and streaming feeds

* Maintain high-quality and current documentation

* Participate in project management and continuous service improvement

* Adhere to security, data protection, and evidence handling policies

Profile

* CCNP-level knowledge (switching, routing, ISE, VPN/GetVPN)

* Strong Cisco switching (C9200/C9300/Nexus), routing, VLANs, STP, EtherChannel, HSRP/VRRP, QoS

* Advanced Firepower (FMC/FTD) & ASA with secure policy design, NAT, VPNs, TALOS

* Meraki (MR/AP, MX) multi-SSID management and enterprise authentication (802.1X/IPSK/MAB)

* SolarWinds administration and Splunk integration

* DNS/DHCP/IPAM and IPv4 subnetting

* WAN/MPLS & L2 circuits, DMZ, SIP, site-to-site VPNs, remote access

* UCS fabrics basics, NetApp video storage familiarity

* RADIUS/AAA, wired/wireless 802.1X and MAB, ISE policy sets, profiling, dACLs, and guest portals

* Certificate/PKI management (VPN, ISE/EAP-TLS, GetVPN)

* DUO MFA admin and device integration

* CCTV: Milestone/Hikvision, hands-on incident evidence handling

* AV: Cisco VC, Extron programming, media conversion, wall screens

* Core electronics fault-finding and structured cabling knowledge

* Excellent Wireshark and troubleshooting aptitude

Job Offer

· Competitive Salary

· Discretionary annual bonus of approximately one month's salary

· 25 days annual leave, rising to 28 days with service

· On site staff restaurant (fully subsidised),

· Defined contribution pension scheme (min. 3% employee, fixed 5% employer),

· Salary Extras discount scheme, including Cycle to Work

· Discounted Watch Purchase Scheme