Overview
Reporting directly to the Infrastructure Platforms Manager, the Network Engineer will be responsible for maintaining the existing LAN/WAN infrastructure as well as working on projects to maintain our LAN/WAN and Office Moves and Changes.
Responsibilities
- Design, implement, and manage complex network infrastructure using Cisco Campus Networking 9300 series and Cisco Nexus switches.
- Configure, deploy, and maintain Palo Alto Prisma Access firewall policies to ensure secure access to critical applications and data.
- Administer and configure FortiGate Firewalls for advanced security measures and threat management.
- Monitor network performance, identify issues, and perform necessary troubleshooting to maintain optimal network health.
- Develop and enforce network security policies, procedures, and standards to protect organisational assets.
- Collaborate with IT and security teams to assess and mitigate security risks and vulnerabilities.
- Provide advanced technical support.
- Escalate issues and manage changes with necessary third-party managed service providers.
- Stay current with industry trends and emerging technologies to ensure the network infrastructure remains robust and up-to-date.
- Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles.
Skills and experience
- General Skills
- In-depth knowledge of core network fundamentals including Layer 2/3 technologies, routing protocols such as BGP and OSPF and network troubleshooting.
- Proven experience with Cisco’s range of products including Catalyst and Nexus switches.
- Working knowledge of Palo Alto firewalls, Prisma Access and SD-WAN in general will be highly desirable.
- Relevant Azure and Cisco qualifications.
- 5 years plus experience.
- HLD / LLD Documentation skills.
- ITIL.
- Knowledge of the Microsoft Azure cloud stack.
Cisco ISE (Required)
- Proven experience in supporting network security functions primarily focusing on Cisco ISE.
- This role requires expertise in Cisco ISE and a strong understanding of network security protocols.
- Configure and optimise ISE policies for authentication, authorisation, and accounting (AAA).
- Monitor and troubleshoot ISE-related issues to ensure optimal performance and security.
- Collaborate with network and security teams to integrate ISE with existing infrastructure.
- Develop and maintain documentation related to ISE configurations, policies, and procedures.
- Strong understanding of network security protocols, including RADIUS, TACACS+, and 802.1X.
Cisco Wireless Controllers (Required)
- Strong understanding of wireless protocols, Cisco Wireless LAN configurations, and security principles.
- Maintaining, troubleshooting, and supporting Wireless LAN Controllers and associated Wi-Fi networks.
FortiGate (Desirable)
- Proven experience as a network engineer or support engineer with a focus on Fortinet products.
- Provide technical support and troubleshooting for Fortinet products, including FortiGate, FortiAnalyzer, FortiManager, and other related solutions.
- Assist with the configuration, deployment, and maintenance of Fortinet and Cisco devices.
- Fortinet certifications such as NSE 4, NSE 5, or higher are highly desirable.
Person specification
- A logical approach to problem-solving and demonstrating analytical capabilities.
- The ability to work well under pressure.
- An enthusiastic approach to work and self-learning.
- Attention to detail and a focus on process.
- Good communication skills, including the ability to convey information concisely to those who may have no background in technology.
- Self-starter.
Competencies
- Working together
- Driving high standards
- Integrity and respect
- Personal impact and growth
- Interpersonal skills
- Inclusive
- Responsible Business
- Commercial mindset
- Delivery focus
- Client-centric
Working arrangement
Hybrid working - We adopt a hybrid and flexible working approach, dependent on the requirements of the role and subject to manager approval.
