Network & Security Engineer

Role: Network & Security Engineer - CISCO / ISE

Contract Rate: £380 - £420 per day PAYE - Inside IR35

Contract Role: 6 months

Location: Didcot - Oxfordhsire

Hybrid role 3 days on site / 2 WFH

ROLE OVERVIEW

Our client are looking for an experienced, fully hands-on Level 3 engineer to strengthen our infrastructure and network security operations capability. This is a senior technical delivery role - not a design-only or advisory position. You will be expected to configure, troubleshoot, and resolve complex issues across Cisco security suite, networking, security appliances, server infrastructure, and hybrid-cloud connectivity with minimal supervision.

The environment spans a multi-building campus network, data-centre infrastructure, SD-WAN fabric, cloud gateway controllers, and enterprise security platforms. You will work closely with leaders in IT Operations to maintain service availability and to assist in fast tracking their infrastructure transformation.

KEY RESPONSIBILITIES

Network Engineering & Operations

• Configure, deploy, and troubleshoot campus and data-centre 100Gbps switching
• Execute network switch rollouts including hardware racking, cabling to standard, patch-panel termination, and fibre patching.
• Perform structured cabinet clean-ups: re-patching copper and fibre runs, labelling, cable management, and documentation updates.
• Support and maintain the eBGP routing fabric across multiple sites
• Configure and monitor QoS profiles for mixed multigigabit, 10G/100G, and uplink interfaces.

Security Infrastructure

• Fast track our implementation of a 5 node Cisco Identity Services Engine (ISE) build for 802.1X, RADIUS, MAB, and posture policy enforcement.
• Manage Cisco Secure Email (formerly IronPort/ESA) including message tracking, content filters, outbreak filters, DLP policies, and quarantine management.
• Support enterprise firewall platforms including rule-set changes, tunnel maintenance, and policy audits.

SD-WAN & Hybrid Cloud

• Support and maintain Cisco SD-WAN (vManage/vSmart/vBond) fabric, including device onboarding, template management, and policy configuration.
• Assist with Cloud OnRamp for Multicloud connectivity (AWS / Azure), including gateway controller health checks and tunnel monitoring.
• Troubleshoot overlay/underlay issues, BFD sessions, OMP route propagation, and control-plane connectivity.

Server & Infrastructure Maintenance

• Perform scheduled server patching and updates across Windows Server environments
• Apply Linux server updates and patches where required (Ubuntu) - desirable but not essential.
• Support virtualisation platforms (Proxmox) for routine maintenance tasks during out-of-hours windows.

Documentation & Standards

• Maintain accurate network diagrams, IP address management records, and change-log documentation.
• Follow and contribute to standard operating procedures, change-management processes, and post-implementation reviews.
• Provide clear handover notes and shift reports for weekday engineering teams.

ESSENTIAL REQUIREMENTS

• CCNP Routing & Switching / Enterprise (current or expired with demonstrable expert-level knowledge).
• Strong hands-on experience with Cisco ISE deployment, policy configuration, and troubleshooting.
• Proven experience administering Cisco Secure Email / IronPort (ESA/SMA).
• Solid working knowledge of enterprise firewall management (Cisco ASA, Firepower/FTD, or comparable).
• Experience with Cisco SD-WAN (Viptela) architecture, including vManage operations and C8000-series router onboarding.
• ENSDWI trained or demonstrably operating at that level across SD-WAN, security, and wireless integration.
• Comfortable with physical infrastructure work: racking, stacking, copper/fibre patching, and cabinet standards.
• Windows Server patching and administration experience.
• Methodical approach to change management and documentation.
• Willing to work on-site at Milton Park on a weekend or flexible shift pattern as outlined above.

DESIRABLE SKILLS

• Linux server administration (Ubuntu) - patching, package management, systemd services.
• Cisco CCIE written or lab (any track) - indicative of depth of knowledge.
• Experience with hybrid-cloud gateway controllers and Cloud OnRamp (AWS, Azure).
• Virtualisation platform experience (Proxmox).
• Familiarity with network observability and monitoring tooling (e.g., Datadog).
• Scripting/automation skills (Ansible, PowerShell) for network or server tasks.

INDIT

Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer.

By applying for this role your details will be submitted to Planet Recruitment. Our Candidate Privacy Information Statement explains how we will use your information.

Only candidates with the relevant skills and experience will be contacted after application, if you do not hear back from us within 7 days you have unfortunately been unsuccessful in your application.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and abilities to perform the duties of the position.