SC Cleared Network Engineer

SC Cleared Network Engineer – 6 months+ – £(Apply online only)pd Inside IR35 – Remote with occasional travel to London Looking for an SC Cleared Network Engineer to provide engineering support. It is expected that the engineer will have both DevOps and network engineering skills. Security Gateway FortiGate Management Maintain and support this component in the Connectivity account for both Non-Prod & Production environments Ensure this component gets rebuilt every 4 weeks by Jenkins Amend Configuration/Code via terraform as required on an adhoc basis:- Anti-virus IPS WAF File-Filter Python updates AWS Terraform provider Updates FortiFlex API changes Associated infrastructure; Route 53,S3,Load balancer, Lambda etc Certificate Deployment Vault secrets Security Gateway NGINX Management Maintain and support this component in the Connectivity account for both Non-Prod & Production environments Ensure this component gets rebuilt every 4 weeks by Jenkins/packer and uses latest Amazon Linux 2023 AMI Amend Configuration via terraform as required on an adhoc basis in relation to below:- Instance type/size Additional TO Amendment to TO configuration Deployment of new TO client cert (yearly) Python updates AWS Terraform provider Updates Associated infrastructure ;route 53,load balancer, etc Certificate Deployment Vault secretsSecurity Gateway Support Respond to Protective Monitoring Alerts Support A&T team when experience issues connecting to TOs will involve NGINX troubleshooting including but not limited to Reviewing Kibana Logs SSH to NGINX Server FortiGate troubleshooting including but not limited to Logging onto Management console Reviewing Protective Monitoring Running packet captures Raise FortiGate FortiFlex license renewal request with clients Licensing as required (expected to be once every 4-5 years) Review FortiFlex usage reports & emails Respond to CloudWatch alarms examples below (not exhaustive list) CPU Lambda script failuresSecurity Gateway Support Onboarding / Provisioning Add users to Security Enforcing Services AD Groups Add users to Security Enforcing Services AWS Console Groups SC Cleared Network Engineer – 6 months+ – £(Apply online only)pd Inside IR35 – Remote with occasional travel to London Damia Group Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept our Data Protection Policy which can be found on our website. Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and ability to perform the duties of the job. Damia Group is acting as an Employment Business in relation to this vacancy and in accordance to Conduct Regulations 2003