Senior Firewall/Security Network Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Create and implement firewall and security layers for AWS, OCI, and hybrid connectivity on-premises.

• Take ownership of route/prefix and policy design across cloud environments and on-premises boundaries.

• Collaborate with security operations, cloud, and platform teams to design security for migrations.

• Convert application, database, and cloud connectivity requests into uniform firewall policies.

• Facilitate firewall modifications through the change management process, including implementation, testing, and rollback strategies.

• Conduct peer reviews of firewall changes and ensure consistent, auditable policies across various sites.

• Spearhead migrations from legacy Cisco and Juniper systems to FortiGate.

• Strategize and carry out quarterly firewall software updates and hardware renewals.

• Oversee IPsec/site-to-site migrations and the decommissioning of firewalls.

• Diagnose and resolve connectivity issues, including dropped traffic, TLS failures, VPN outages, and firewall failovers.

• Manage the out-of-band management network for firewalls.

• Integrate firewalls with FortiAnalyzer, SIEM log forwarding, netflow, and SNMP.

• Assist in addressing misconfigurations and mitigating risks.

⛳️ Requirements

• Extensive hands-on experience with FortiGate / FortiOS, including VDOMs, security policies, NAT, SSL inspection, FortiAnalyzer, and FortiConverter.

• Proficient in cloud network security, focusing on firewall and connectivity design in AWS (TGW, VPC, GWLB) and/or OCI, particularly for hybrid on-premises↔cloud flows.

• Strong discipline in change management, including implementation, testing, rollback planning, and peer reviews.

• Excellent troubleshooting skills for connectivity issues across the packet path, encompassing drops, TLS, DNS, and routing.

• Capability to collaborate directly with application, database, cloud, and security teams to transform requirements into secure, standardized policies.

• Preferred: experience utilizing AI services/assistants within an engineering context.

• Preferred: expertise in network automation using Ansible, AWX, or similar tools.

• Preferred: familiarity with SIEM and observability tools, such as FortiAnalyzer, netflow, SNMP, and log pipelines.

• Preferred: experience in multi-site WAN and data center networking.

• Preferred: scripting experience, particularly in Python, for tooling and validation purposes.

• Preferred: knowledge of security frameworks and remediation of audits/misconfigurations.

🏝️ Benefits

• Equal opportunities employer.

• Membership in the Living Wage Foundation.

• Background checks conducted for successful employment offers.