Senior Network Security Engineer - Palo Alto, Check Point, Fortinet, Azure, AWS

Project overview

Senior Network Security Engineer

AxiaMetrics is recruiting a Senior Network Security Engineer for an enterprise client. You will design, implement and support network security across complex on-premises, cloud and hybrid environments, lead security improvement initiatives and drive the adoption of Zero Trust networking.

Project details

• Start: ASAP
• Duration: 6 months
• Location: Coventry, UK, GB

KEY SKILLS

• Enterprise Firewalls: Palo Alto, Check Point, Cisco Firepower, Fortinet FortiGate, Juniper SRX
• Azure network security: Azure Firewall, NSGs, Application Gateway, DDoS Protection, Virtual WAN, ExpressRoute, Private Endpoints
• AWS network security: Security Groups, NACLs, Transit Gateway, Network Firewall, WAF, Shield, Direct Connect, VPC
• Zero Trust, ZTNA, SASE, SDP and micro-segmentation
• Routing and switching: BGP, OSPF, MPLS, VLANs, high availability
• Automation: Python, PowerShell, Terraform, Ansible

THE ROLE

• Design, implement and maintain enterprise network security architectures aligned to Zero Trust principles
• Deploy and administer Firewall platforms, including policy, NAT and access control configuration
• Lead Firewall rule optimisation and recertification exercises
• Design and secure Azure and AWS network architectures and hybrid connectivity
• Implement micro-segmentation, ZTNA and SASE solutions to reduce lateral movement risk
• Implement and support site-to-site, client, IPSec and SSL VPNs and remote access solutions
• Investigate network-based security incidents and analyse logs and traffic, working with the SOC using Sentinel, Splunk, QRadar, Cortex XDR, CrowdStrike or Darktrace
• Run vulnerability assessments, support penetration testing and own remediation plans
• Lead security assessments and architecture reviews for new projects
• Ensure compliance with ISO 27001, NIST CSF, CIS Controls, GDPR and Cyber Essentials Plus, and support audits
• Produce architecture designs, Firewall review reports, segmentation strategies, Zero Trust roadmaps, risk assessments and operational runbooks

REQUIRED EXPERIENCE

2 days a week remote

• 7-10+ years in network security engineering
• Strong hands-on experience managing enterprise Firewall platforms
• Experience securing complex enterprise and cloud environments, including critical production systems
• Proven delivery of network segmentation and Zero Trust initiatives
• Knowledge of IDS/IPS, WAF, DDoS protection, secure web gateways, NAC and DNS security
• Strong troubleshooting, stakeholder and vendor management skills, with the ability to work under pressure
• Background in a regulated sector such as financial services, insurance, healthcare, telecoms, energy and utilities, retail or the public sector is an advantage.