Описание: Opticore IT is a specialist Network Engineer and Project Management consultancy offering a wide variety of opportunities to work within fast-paced, challenging environments across our client base spanning multiple sectors including Finance, Broadcast Media, Telecommunications and more. Opticore IT are currently searching for a Senior Network Security Engineer with a strength in both Cisco Firepower and FortiGate to join the team.
Задачи
- Author the Rule Design Standard for Cisco FTD and FortiGate, covering naming, structure, permitted and prohibited constructs, mandatory metadata and the definition of a wide rule Design and own the vendor neutral rule schema (v1 and v2), with worked examples for both platforms, forming the Policy as Code data model
- Specify the fields, validation and workflow of the Ivanti firewall request catalogue item ready for client configuration.
- Validate access, tooling and Elastic log coverage across all in-scope devices (2x FMC, 10x FTD, 8x FortiGate)
- Technically review the AlgoSec Firewall Analyzer baseline, risk rank findings and present baseline measures to client engineering
- Carry out dependency analysis of rules with no attributable owner before they are routed to risk acceptance
- Produce change packs with rollback plans to remove unused, shadowed, redundant and expired rules, and implement them out of hours under the client's CAB
- Analyse observed flows in Elastic, including month end and quarter end traffic, to design explicit service rules that replace wide and overly permissive rules
- Confirm resilient and failover paths before any rule is judged unused, then monitor hit counts, disable with a rollback window and remove the original rule
- Define how DC Refresh replacement firewalls are brought into the standard and schema from day one
- Produce the Firewall Policy as Code high-level design, covering architecture, validation pipeline and integration with Ivanti, change control and AlgoSec.
Требования
- Cisco Firepower (FMC/FTD) & FortiGate Policy Engineering
- Large Scale Rule Base Clean-up & AlgoSec Analysis
- Traffic Flow Analysis & Resilient Design
- Change Pack Authoring & CAB Implementation
- Technical Standards Authorship in Financial Services
Условия
- initial 4-month contract (inside IR35) with scope to extend
- This opportunity will require 2 days per week in the office in Central London.
Network security engineer in financial services employer: OpticoreIT
Opticore IT is an exceptional employer, offering a dynamic work environment in the heart of central London, where innovation meets collaboration. As a Security Engineer, you'll not only engage in cutting-edge projects across diverse sectors but also benefit from a culture that prioritises employee growth and inclusivity, ensuring you have the support and resources needed to thrive in your career. With opportunities for professional development and a commitment to diversity, Opticore IT stands out as a rewarding place to build your future.
