Network Security Engineer - SC Cleared/PCNSE (12 month fixed term)

Mid-level role within the Security Support team responsible for maintaining the availability, security, and operational health of the enterprise network security estate, focusing on Firewalls and SASE services. Resolves incidents, fulfil service requests, delivers controlled changes, and contributes to problem management and continual improvement.

Key Responsibilities

• Operations & Service Management: Support security infrastructure and Firewalls following ITIL practices (incident, request, problem, change management).
• Incident & Issue Ownership: Methodically triage, diagnose, remediate, and close incidents; escalate with evidence when needed.
• Change Delivery: Translate requirements into support actions and execute controlled production changes with peer review, testing, and rollback plans.
• Problem Management: Perform root-cause analysis on recurring issues and implement preventative solutions.
• Vendor & Team Coordination: Manage technical escalations with vendors, MSPs, and internal cross-functional IT/security teams.
• Documentation & Governance: Maintain configurations, asset records, runbooks, and diagrams; apply least-privilege principles and audit compliance in a regulated environment.

Technical Requirements

• Networking & Protocols: Strong knowledge of TCP/IP, DNS, DHCP, NAT, TLS, HTTP/S, static/dynamic routing (BGP, OSPF), VRFs, and segmentation.
• Firewall & Security Administration: Hands-on experience with enterprise NGFWs (policy, NAT, VPNs, security profiles) and life cycle management (upgrades, patching, rule recertification).
• Troubleshooting: Advanced diagnosis using PCAPs, logs, and monitoring tools for asymmetric routing, MTU, authentication, and application connectivity issues.
• Preferred Platforms: Palo Alto/Fortinet (Panorama, FortiManager, FortiAnalyzer), SASE solutions, and F5 (or equivalent load balancers).
• Desirable: AWS/Azure networking, vulnerability management (Tenable), email security (Mimecast), basic Scripting/automation (Python, PowerShell, APIs), and ITIL or vendor certifications (PCNSE, NSE, CCNA/CCNP).

Core Competencies

• Ownership & Judgment: Takes end-to-end accountability and stays calm during high-priority incidents.
• Communication & Collaboration: Delivers concise updates to stakeholders and works across security, operations, and risk teams.
• Risk & Detail Focus: Exercises discipline when modifying production controls and constructively challenges risky changes.

Working Conditions

• Shift Rota: Coverage between 08:00 and 18:00, with occasional out-of-hours maintenance as required.
• Clearance: Security Check (SC) clearance required.
• Full time hours
• Role is mainly remote - onsite travel infrequent
• Salary - up to £75000
• Fixed term 12 month
• Includes benefits/holidays