Infrastructure Engineer (Firewall & Security) - MHPRA - SEO

Overview

The Technology & Service Operations function is responsible for managing the existing IT infrastructure including both software and hardware, databases, and other technology platforms; leading the support and maintenance of applications; development and testing of new applications and platforms; and cyber and information security for the Agency. The Network Core Engineer will play a key role in managing and delivering network projects and BAU tasks, with a particular focus on critical areas such as the network core, data centres, and related infrastructure. This role is vital in ensuring the stability, performance, and security of the core network as the MHRA undergoes a significant overhaul of its IT infrastructure, including the deployment of new equipment in these critical areas. The successful candidate will provide advanced expertise in core network technologies, working closely with both senior and junior engineers to ensure smooth operations and continuous improvement. You will act as an escalation point for more complex issues related to the network core and data centre environments, providing guidance and troubleshooting support to junior engineers when necessary. The role also involves collaborating with other teams to align core network initiatives with the overall IT strategy.

Key Responsibilities

• Deploy, manage and configure Cisco FTD firewalls via FMC in redundant configurations.
• Manage and configure Cisco ISE.
• Understand least privilege concepts and secure internet‑connected firewalls.
• Run firewalls as a core and (optional) support micro‑segmentation services from virtual platforms using FTD/FMC technologies.
• Manage and deploy advanced FMC configurations such as OSFP, VLAN and VLSM in firewalls, NAT/PAT/S‑NAT, site‑to‑site VPNs, ACLs and DACLs.
• Lead and manage the successful execution of core network projects, ensuring they are delivered on time, within scope, and aligned with the MHRA’s IT strategy.
• Serve as the main escalation point for junior network engineers, providing advanced troubleshooting and technical expertise in resolving complex core network and data centre issues, ensuring high‑quality resolutions that prevent future incidents.
• Mentor and support junior engineers, fostering a collaborative environment and encouraging skills development across the team.
• Implement and maintain robust security protocols to safeguard core network infrastructure, ensuring compliance with security policies and regulatory requirements.
• Proactively monitor and assess core network performance, identifying potential risks or weaknesses and applying pre‑emptive solutions to minimise downtime and service disruptions.
• Play a pivotal role in the agency\’s ongoing IT infrastructure overhaul by recommending, testing, and integrating cutting‑edge core network technologies.
• Collaborate closely with the Lead Network Architect, project teams, and other IT functions to ensure that core network strategies are fully aligned with the overall IT infrastructure roadmap and broader organisational goals.
• Establish and maintain productive relationships with external vendors, ensuring their services and products meet the agency’s performance, security, and contractual expectations.
• Engage with senior stakeholders and cross‑functional teams to communicate project progress, core network performance, and ensure business requirements are consistently met.

Qualifications and Experience

• A track record of identifying deeper underlying problems and opportunities and anticipating problems before they occur.
• Experience developing and maintaining relationships with suppliers, making sure services and products are delivered and aligned to industry best practice and regulatory and contractual requirements.
• Proven experience in managing and supporting enterprise network environments, particularly focusing on network core devices and infrastructure.
• Strong technical expertise in core network technologies, including LAN/WAN, data centre infrastructure, routing, switching, and network security.
• Proficiency in configuring and managing Cisco or similar network infrastructure, with experience in implementing security protocols and best practices.
• Hands‑on experience with troubleshooting network performance issues and integrating new equipment within an existing IT architecture.

Location and Working Arrangements

This full‑time and permanent role will be based in 10 South Colonnade, Canary Wharf London, E14 4PU or South Mimms, Hertfordshire. The role is open only to applicants based in the UK. We offer a flexible, hybrid arrangement with a minimum of 8 days per month onsite, potentially increasing to 12 days depending on business needs, with remaining time worked remotely. The position includes participation in an out‑of‑hours on‑call rota, with additional on‑call pay.

About Us

The Medicines and Healthcare products Regulatory Agency (MHRA) enhances and improves the health of millions of people every day through the effective regulation of medicines and medical devices. Our Digital and Technology Group delivers optimised IT infrastructure and secures data to support scientific, inspection and organisational excellence.