Network Security Engineer in Knutsford

Location: Knutsford

Work setup: 60% Office 40% Remote

Duration: 4 months

Total cost to Capgemini: £420

Please make an application promptly if you are a good match for this role due to high levels of interest.

CONTRACTOR MUST BE ELIGIBLE FOR BPSS

As an experienced Network Security Engineer, you will play a key role in designing, implementing, securing, and optimising enterprise network security services across on-premises, cloud, and hybrid environments. Your expertise will be utilised to strengthen the organisation's cyber defence capabilities, drive network security innovation, automate security operations, and ensure resilient, secure, and scalable connectivity solutions.

Primary Responsibilities

• Network Security Engineering & Delivery

Lead the implementation, engineering and operational support of Island Enterprise Browser services across enterprise environments. Develop and maintain browser security policies to protect sensitive data, secure third-party access and support workforce mobility initiatives. Collaborate with Security Architecture, End User Computing, Identity & Access Management and Security Operations teams to deliver secure browser-based access solutions. Support browser modernisation initiatives that replace traditional VPN and endpoint-centric security controls with Zero Trust access models. Design, implement, and maintain secure enterprise network infrastructure and security controls aligned to organisational strategy and security standards. Drive network security enhancements and modernisation initiatives within agreed budgets, timelines, and risk appetites. Support the delivery of secure connectivity solutions across cloud, on-premises, and hybrid environments. Collaborate with architects and engineers to develop High Level Designs (HLDs) and Low Level Designs (LLDs) into operational solutions.

• Network Security Operations & Governance

Lead operational readiness and transition requirements from design/build phase to BAU. Lead policy governance, including rule review, optimisation, recertification, and compliance management processes. Drive continuous improvement of network security operations through automation, policy simplification, and control standardisation. Identify opportunities to reduce operational risk through proactive firewall rule analysis, remediation, and optimisation activities. Partner with Infrastructure, Security Architecture, Engineering, and Cyber Defence teams to deliver secure network services and strategic security initiatives. Collaborate with leadership teams to align network security capabilities with broader technology, resilience, and cyber security strategies.

• Security Automation & Engineering

Develop and implement automated solutions for network security administration, policy management, compliance validation, and operational processes. Drive the adoption of Infrastructure as Code (IaC), Security as Code, and automated governance controls across network security platforms. Contribute to enterprise-wide initiatives focused on network visibility, security posture improvement, and operational efficiency.

• Security Operations & Risk Management

Monitor and analyse browser security events, policy violations and suspicious user activity to support threat detection and incident response activities. Support investigations involving browser session activity, data protection events and secure application access controls. Monitor, analyse, and respond to network security incidents, vulnerabilities, and emerging threats. Support threat detection, containment, remediation, and post-incident reviews. Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats. Conduct security assessments, rule reviews, and network segmentation activities.

• Security Architecture & Standards

Ensure network architectures comply with security standards, secure-by-design principles, and software development lifecycle requirements. Support the implementation of Zero Trust, defence-in-depth, and least privilege security models. Maintain awareness of current industry threats, vulnerabilities, and security technologies.

Standard Technical Skills & Competencies

• Strong understanding of SWG controls Island Enterprise Browser, extension and agent engineering
• Strong understanding of TLS interception Proxy & Secure Web Gateway Technologies
• Zero Trust Network Access (ZTNA)
• Strong understanding of authentication method at enterprise level
• Strong understanding of content controls (request and response mode)
• Network Security Automation (Python, PowerShell, APIs, Terraform)
• Cloud Security & Secure Connectivity
• Identity Integration (Entra ID, Conditional Access, MFA)
• Enterprise Browser & Secure Access Technologies & Security Policy Management
• Hands-on experience implementing, configuring and supporting Enterprise Browser solutions, including Island Browser or equivalent secure enterprise browser technologies.
• Design and implement browser-based security controls to support Zero Trust security principles, secure remote access, data protection and policy enforcement.
• Configure and manage browser security policies including: Data Loss Prevention (DLP), Clipboard controls, File upload and download restrictions, Browser isolation controls, Session protection, Watermarking Secure application access controls.
• Experience integrating Enterprise Browser platforms with: Downstream SWG, Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, Security Information and Event Management (SIEM) platforms.
• Strong understanding of browser-based security architecture, enterprise endpoint security and secure access governance.
• Experience troubleshooting browser policy enforcement, application compatibility, authentication integration and user adoption challenges.
• Knowledge of Browser Isolation, Secure Enterprise Browsing, Zero Trust Access and Secure Workspace technologies.
• Strong operational experience supporting enterprise network security environments.
• Experience managing security incidents, policy changes, exceptions, and operational support within regulated organisations.
• Understanding of compliance management, governance processes, audit requirements, and regulatory controls.
• Experience working within ITIL-aligned Incident, Problem, Change, and Service Management frameworks.