Senior Network and Security Engineer - 2 year FTC

Job Description

The Senior Network and Security Engineer leads the design, implementation, maintenance and support of the networking technology fabric that underpins the organisations IT infrastructure (including on-premises, and cloud environments), its unified communicationsand cyber security.Client DetailsPublic Sector OrganisationDescription

• Lead the networks workstream on projects and programmes to ensure that the network topology complies with the agreed standards and provide sufficient capacity, availability, and quality of service.
• Collaborate with infrastructure engineers to ensure systems are practically designed. Plan, direct and coordinate activities, engaging with other stakeholders to manage and implement a programme.
• Provide guidance and make recommendations to colleagues ensuring that service design and transition plans can be supported by network topologies and network provisions. Research new technologies and make recommendations when changes are needed to IT strategyand architecture.
• Develop a clear view of the cyber risk exposure, to provide meaningful risk advice and mitigations. Provide clear, consistent reporting to senior stakeholders, driving automation across processes and reporting where possible and ensuring the security ofthe organisations network infrastructure including managing firewalls, using vulnerability scanning, port monitoring tools and resolving security related incidents.
• Leading the design, implementation, testing and maintenance of WAN and LAN network solutions for the organisation using the technologies listed below and others as they evolve including documentation of network security systems and internal controls, throughto acceptance into service.
• Manage remote access and VPN solutions and switching technologies - including Cisco Nexus & Catalyst 9500, 9300 and 3850 series switches
• Ensure the networking infrastructure meets internal Key Performance Indicators (availability and performance).
• Ensuring adherence to industry best practice for instance ITIL, and relevant gujidance from pan-government sources like NCSC and commercial sources like Cisco, CheckPoint, Palo Alto etc.
• Provide expert guidance in the Architecture governance forums (ARB, CAB and Technical Steering Groups).
• Investigate and resolve incidents/problems escalated through the Service Desk, Applications and Security teams and provide them with guidance and support. Performance & Capacity ManagementMaintain integrity and security of network hardware and softwareby applying patches and configuration changes as recommended or as required, for e.g. remediating known vulnerabilities.
• Manage network infrastructure performance and costs, assure maximum uptime; perform ongoing analysis, carry out capacity planning including license management, and technical tuning of the services to improve resilience, performance, VFM and compliance.
• Maintain knowledge of industry trends and identify potential solutions for the organisation.

Profile

• IT infrastructure. Experience of designing and implementing infrastructure technologies, solutions and services such as: networking, physical infrastructure, software, COTS and open source packages and solutions, and cloud computing, includingIaaS, PaaS and SaaS. Core network skills to include, routing (IS-IS, BGP, MPLS, VRFs etc), switching (VLANS, Stacking, etc.) or comparable experience.
• System integration. Knowledge of moderate to complex service integration, particularly experience of integration with Azure & AWS related networking and typical DMZ architectures and Express Route, with experience of capacity and availabilitymonitoring and analysis using tools such as Solar Winds.
• Systems design. Experience of designing secure systems characterised by medium levels of risk, impact, and business or technical complexity. Ability to select appropriate design standards, methods and tools and ensure they are applied effectively.Ability to review the systems designs of others to ensure selection of appropriate technology and efficient use of resources. Substantial experience in designing, deploying, and managing of Cisco Wireless / LAN networks, Cisco DNA Centre/SD-Access networks,Cisco ISE.
• Technical understanding. Deep understanding of the technical concepts required in the role including LAN, WAN, WiFi, data-centre networks, unified comms, network management solutions, network-specific security, remote access technologiesand approaches, SIEM and IPS/IDS technologies and toolset used for vulnerability scanning including Nessus, understanding of SIP, VoIP, Video Conferencing, managing QOS and good knowledge of Microsoft Visio to create network documentation.
• Troubleshooting and problem resolution. Experience of breaking a problem down into its component parts to identify and diagnose root causes and of troubleshooting and identifying problems across different technology capabilities, ideallyCisco Catalyst 9500, 9300, 3850 and Nexus 3K switches, Cisco FirePower, Checkpoint and Palo Alto firewalls in HA configured environments, Cisco ISE including NAC, 802.1x, MAB, Profiling policies, Certificates and Guest Portal, or comparable technologies.
• Stakeholder engagement. Effective stakeholder management skills and proven ability of communicating to both technical and non-technical audiences.

Job Offer

• The starting salary available is £64,672 with the opportunity to go to up to a maximum of £71,302
• Civil Service pension
• Plus other benefits!