Network Security Engineer
- 6 Month contract
- ASAP Start
- Remote in the UK with travel required to Poland or Madris as required
About Sekuro
We're a founder-led global consulting company in the cybersecurity market, operating across Australia, Asia, and the UK. Our reputation is built on breaking away from traditional consulting models, embracing a direct and fresh approach that puts clients at the centre of everything we do. Our mission is simple: to be our clients' most trusted security partner by delivering impactful outcomes that build resilience, enable innovation, and improve competitiveness.
Our vision is to be the world's most trusted security partner, enabling organisations to protect today and prepare for tomorrow. We exist to secure organisations, empowering them to thrive in a digital world.
We live by our values: we are brave, we raise the bar, we tell it how it is, we own the outcome, and we care for all.
About the Role
Sekuro is looking for an experienced Firewall and Network Security Engineer for a critical data centre migration programme on behalf of one of our clients.
The role will be embedded as a genuine working member of the client's EMEA infrastructure team, reporting to the EMEA Head of Information Security. The scope covers two data centre facilities in Poland and a DR site in Madrid.
The objective is straightforward; assess the existing firewall and routing environment, build a clean and optimised policy set from the ground up, and deliver a migration-ready configuration that enforces proper segmentation, least privilege access, and a materially reduced risk profile before migration execution begins.
What You'll Do
In this role you will perform a detailed review of all existing firewall rule sets (L3–L7) and routing configurations (BGP, OSPF, static routes), mapping traffic flows to the target three-tier architecture and validating zone placement and access policies. From there, the focus shifts to identifying and documenting redundant, obsolete, overly permissive, conflicting, and non-compliant rules, as well as validating segmentation across DMZ, Internal segments and country-specific sub-nets.
Working closely with the programme teams, you will develop rulebase optimisation recommendations and deliver a clean, portable, and auditable configuration ready for cutover.
- A comprehensive Firewall and Routing Assessment Report
- A Firewall Rule Rationalisation Matrix (retain / modify / remove)
- A gap analysis against the three-tier architecture model and internal security policies
- A proposed future-state rule design aligned with segmentation zones
- A prioritised risk assessment with remediation recommendations
- A migration-ready, optimised firewall rule set
- An executive summary for senior stakeholders
What You'll Need
- You will bring extensive hands-on experience across enterprise firewall platforms including Palo Alto Networks, Check Point, Fortinet, and Cisco ASA/Firepower, combined with strong expertise in network segmentation, L3–L7 traffic filtering, and routing protocols.
- A proven track record in data centre migrations and firewall rule auditing at scale is essential, as is a solid grounding in three-tier architectures and Zero Trust principles.
- Just as important as the technical ability is the capacity to communicate clearly; this role requires someone who can engage confidently with network engineers and executive stakeholders alike and produce documentation that is structured, precise, and actionable.
- Experience with cloud networking (Azure/AWS), micro-segmentation, rule analysis tools such as AlgoSec, Tufin, or FireMon, and certifications including CISSP, CCSP, PCNSE, or CCNP Security would all be well regarded.
Please note: Our recruiter Tim Smith is based in Sydney , Australia and will be calling on Whatsapp from a +61 number