Reporting directly to the Infrastructure Platforms Manager, the Network Engineer will be Responsible for maintaining the existing LAN/WAN infrastructure as well as working on projects to maintain our LAN/WAN and Office Moves and Changes.
Roles and Responsibilities
•Design, implement, and manage complex network infrastructure using Cisco Campus Networking 9300 series and Cisco Nexus switches.
•Configure, deploy, and maintain Palo Alto Prisma Access firewall policies to ensure secure access to critical applications and data.
•Administer and configure FortiGate Firewalls for advanced security measures and threat management.
•Monitor network performance, identify issues, and perform necessary troubleshooting to maintain optimal network health.
•Develop and enforce network security policies, procedures, and standards to protect organisational assets.
•Collaborate with IT and security teams to assess and mitigate security risks and vulnerabilities.
•Provide advanced technical support
•Escalate issues / manage changes with necessary 3rd party managed service providers.
•Stay current with industry trends and emerging technologies to ensure the network infrastructure remains robust and up-to-date.
•Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles.
Skills and experience
General Skills
•In-depth knowledge of core network fundamentals including Layer 2/3 technologies, routing protocols such as BGP and OSPF and network troubleshooting.
•Proven experience with Cisco’s range of products including Catalyst and Nexus switches.
•Working knowledge of Palo Alto firewalls, Prisma Access and SD-WAN in general will be highly desirable.
•Relevant Azure and Cisco qualifications
•5 years plus experience
•HLD / LLD Documentation skills
•ITIL
•Knowledge of the Microsoft Azure cloud stack
Cisco ISE (Required)
•Proven experience in supporting network security functions primarily focussing on Cisco ISE.
•This role requires expertise in Cisco ISE and a strong understanding of network security protocols.
•Configure and optimise ISE policies for authentication, authorisation, and accounting (AAA).
•Monitor and troubleshoot ISE-related issues to ensure optimal performance and security.
•Collaborate with network and security teams to integrate ISE with existing infrastructure.
•Develop and maintain documentation related to ISE configurations, policies, and procedures.
•Strong understanding of network security protocols, including RADIUS, TACACS+, and 802.1X.
Cisco Wireless Controllers (Required)
•Strong understanding of wireless protocols, Cisco Wireless LAN configurations, and security principles.
•Maintaining, troubleshooting, and supporting Wireless LAN Controllers and associated Wi-Fi networks.
FortiGate (Desirable)
•Proven experience as a network engineer or support engineer with a focus on Fortinet products.
•Provide technical support and troubleshooting for Fortinet products, including FortiGate, FortiAnalyzer, FortiManager, and other related solutions.
•Assist with the configuration, deployment, and maintenance of Fortinet and Cisco devices.
•Fortinet certifications such as NSE 4, NSE 5, or higher are highly desirable.
Person specification
•A logical approach to problem-solving and demonstrating analytical capabilities
•The ability to work well under pressure
•An enthusiastic approach to work and self-learning
•Attention to detail and a focus on process
•Good communication skills, including the ability to convey information concisely to those who may have no background in technology
•Self-starter
Competencies
•Working together
•Driving high standards
•Integrity and respect
•Personal impact and growth
•Interpersonal skills
•Inclusive
•Responsible Business
•Commercial mindset
•Delivery focus
•Client-centric
Hybrid working - We adopt a hybrid and flexible working approach, dependent on the requirements of the role and subject to manager approval.
For a detailed specification please download the job description in the documents section of this page.
Clicking 'apply' will direct you to the application tracking system, hosted for us by Reach-ATS.com.