- City of London
- 3 days per week onsite
- Salary up to £91,000 per annum
Employment Type: Permanent
Hybrid: 3-day onsite a week (Moorgate Station)
Salary: Up to base £91,000 + Bonus
Job Summary:
Our client, a leading global investment secto, is seeking a Network Security Specialist to join their Connectivity Engineering Team. This is a hands-on technical role focused on designing, implementing and governing network security controls across a high-performance, mission-critical enterprise environment.
you’ll serve as a technical lead across Fortinet, Palo Alto Networks and Zscaler, driving Zero Trust and micro-segmentation adoption across on-premises, cloud and containerised environments. This is an excellent opportunity for a security-focused network engineer who thrives on translating policy into enforceable technical controls and embedding security by design across a complex, regulated organisation.
Key Responsibilities:
- Design, implement and maintain enterprise network security controls including Firewalls, proxies and secure access services (Palo Alto Networks, Fortinet, Zscaler)
- Design and evolve Zero Trust network architectures, including identity-aware access and micro-segmentation strategies for traditional and containerised workloads
- Help shape the network security roadmap; produce high- and low-level designs and maintain security standards, patterns and policy definitions
- Partner with Information Security to translate policy into enforceable technical controls; support audits, risk assessments and regulatory obligations
- Provide 3rd-line escalation and subject-matter expertise across LAN, WAN, campus and data centre network security incidents
- Mentor engineers, set best practice and provide technical guidance to project teams and senior stakeholders across the Connectivity Engineering Team
- Minimum 5 years experience in regulated, mission-critical environments (financial services or critical infrastructure preferred)
- Deep hands-on expertise across Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager, FortiAnalyzer) and Zscaler (ZIA, ZPA, Zero Trust Exchange)
- Strong experience designing and implementing network segmentation, micro-segmentation and Zero Trust-aligned controls
- Experience securing hybrid environments spanning on-premises, cloud (Azure/AWS/GCP) and containerised platforms (Kubernetes/OpenShift)
- Relevant certifications expected: PCNSE, NSE, CCNP Security or CISSP; ITIL certification is an advantage
Desirable Skills:
- Automation/IaC (Terraform, Ansible), BGP/OSPF/VRF/VxLAN, Cisco ISE/NAC, packet capture and network monitoring tools, ITILv3 processes
