SME-NETWORKING

Job Description

The Role

We are seeking a skilled and motivated Network Security Engineer to join our Infrastructure and Security team, responsible for designing, implementing, supporting, and managing enterprise network security solutions across multiple customer environments. The role combines project delivery and business-as-usual (BAU) operations, requiring strong expertise in next-generation firewalls, SASE, SD-WAN, Azure and AWS networking, and enterprise networking.

The role supports delivery across our technology pillars: Enterprise Networking, Cyber Security, and Cloud & Infrastructure, for multiple managed-services customers. The ideal candidate has excellent troubleshooting skills, a customer-focused mindset, and the ability to deliver secure, scalable, and resilient solutions.

Who You Are

You take genuine pride in keeping things running, and in running them well. You are meticulous, proactive, and you care about quality at every level. When something needs to be documented, you do it properly. When a customer has a problem, you own it until it is resolved. You can explain a technical issue clearly to a non-technical stakeholder without making them feel out of their depth. You work well under pressure, bring calm and methodical thinking to complex situations, and you understand that 'good enough' is never good enough when a client's business depends on your work.

Key Responsibilities

BAU Operations

• Provide Level 2 / Level 3 operational support for firewall, network, and security infrastructure across multiple managed-services customer environments.
• Own incident, problem, and change management end-to-end, resolving issues within agreed SLAs.
• Participate in on-call rosters, scheduled maintenance windows, and after-hours change implementation as required.
• Perform proactive monitoring, capacity planning, and performance tuning to ensure availability, performance, and security compliance.
• Conduct regular firewall and network health checks, and maintain configuration backups, SOPs, network diagrams, and CMDB accuracy.
  
  

Project Delivery

• Design and implement secure network and security solutions aligned to customer requirements and best practice.
• Lead firewall migrations, infrastructure refreshes, and SD-WAN / SASE rollouts across enterprise and cloud environments.
• Scope requirements and produce high- and low-level designs, implementation plans, test plans, and rollback procedures.
• Coordinate with project managers, solution architects, vendors, carriers, and customers throughout the project lifecycle.
• Manage cutover, validation, and post-implementation support, and produce as-built documentation and handover to the BAU team.
  
  

Experience

• Minimum 5 years' experience in network security engineering, with demonstrated delivery of enterprise network and security projects.
• Strong operational support experience in complex, multi-customer or managed-services environments.
  
  

What Success Looks Like

• Secure, reliable, and highly available firewall and network environments, with projects delivered on time and to a high standard.
• Timely incident resolution and continuous improvement of network performance, resilience, and security posture.
• Trusted relationships built with customers, vendors, and internal stakeholders.
  
  

Job Requirements

Skills & Experience

Firewalls, SASE & SD-WAN

Fortinet FortiGate, Palo Alto Networks, and Cisco Firepower / ASA; FortiSASE and Cisco SASE including ZTNA; SD-WAN design and deployment across Fortinet, Cisco Viptela, and Cisco Meraki.

Networking, Routing & Switching

TCP/IP, VLANs, MPLS, QoS, NAT, DNS/DHCP, high availability, and VPN (IPSec, SSL VPN); BGP, OSPF, Layer 2/3 design, STP/RSTP, LACP, and HSRP/VRRP; enterprise Wi-Fi design and surveys using tools such as Ekahau.

Cloud Networking

Azure: VNets, Virtual WAN, Azure Firewall, VPN Gateway, ExpressRoute, NSGs, and Load Balancer. AWS: VPC, Transit Gateway, Direct Connect, and security groups (desirable).

Enterprise Vendors

Fortinet, Palo Alto Networks, Cisco, and Cisco Meraki; Aruba switching and wireless; knowledge of Arista and Extreme Networks is a strong advantage.

Qualifications & Certifications

• Fortinet NSE 4 (mandatory minimum), with NSE 5 / 6 / 7 highly desirable.
• Palo Alto Networks PCNSA / PCNSE, Cisco CCNA / CCNP Enterprise, or Cisco SD-WAN / SASE certifications (desirable).
• Microsoft Azure Administrator Associate or Azure Network Engineer Associate, and/or AWS Advanced Networking or Solutions Architect (desirable).
• Aruba certifications (e.g. ACMA / ACSA) an advantage.
  
  

Experience

• Minimum 5 years' experience in network security engineering, with demonstrated delivery of enterprise network and security projects.
• Strong operational support experience in complex, multi-customer or managed-services environments.
  
  

What Success Looks Like

• Secure, reliable, and highly available firewall and network environments, with projects delivered on time and to a high standard.
• Timely incident resolution and continuous improvement of network performance, resilience, and security posture.
• Trusted relationships built with customers, vendors, and internal stakeholders.