NetSecOps Engineer required by my large client on a brand new project. Network Security Operations within a large-scale retail environment. The engineer will support and partner with the core Networks team to deliver a major Network Access Control (NAC) programme, alongside LAN migration activities across a complex, distributed estate. This role requires deep hands-on expertise in enterprise NAC, network security engineering, and operational readiness testing.
Key Responsibilities
* Lead technical delivery and operational readiness for a multi-phase NAC implementation across hundreds of retail and corporate sites.
* Collaborate closely with the Networks team to design, configure, test, and deploy NAC policies, authentication flows, segmentation models, and onboarding rules.
* Support large-scale LAN modernisation and migration activities, including site cutovers, switch refreshes, and security control uplift.
* Design, test, and validate operational processes, including access policy enforcement, device profiling, guest networks, and remediation workflows.
* Conduct end-to-end testing cycles (functional, failover, edge-case, and performance) ensuring stability and minimal business disruption.
* Create and maintain operational documentation, runbooks, topology diagrams, and troubleshooting guides.
* Support security governance, risk assessments, and operational KPIs related to network security controls.
* Act as a NetSecOps SME, advising on best practices for identity-based networking and zero-trust-aligned access models.
Required Skills & Experience
* Extensive experience in NetSecOps, Network Engineering, or Security Engineering within large enterprise environments (retail experience highly desirable).
* Hands-on expertise with NAC platforms (Fortinet, Aruba ClearPass, Forescout, or equivalent), including 802.1X, RADIUS, TACACS+, device profiling, posture assessment, and certificate-based authentication.
* Strong understanding of LAN/WAN networking technologies (switching, routing, VLANs, STP, DHCP, DNS, BGP/OSPF).
* Experience in large-scale LAN migration or refresh programmes.
* Proficiency in network security tooling: firewalls, segmentation, zero trust networking, identity-aware networking, microsegmentation.
* Familiarity with complex retail estates (distribution centres, stores, corporate offices) and operational constraints