CCTV Security Engineer in Cheshire, Warrington

Security Engineer Infrastructure & Network Security Manchester Richmond Square Consulting is working with a growing technology business to recruit an experienced Security Engineer for a highly secure, regulated environment. This is a genuinely hands-on engineering role focused primarily on securing complex on-premise infrastructure, alongside hybrid-cloud environments. It would suit somebody with strong experience across VMware NSX, enterprise firewalling, Windows security and network segmentation who enjoys implementing and improving security controls rather than simply producing policies or architecture documents. 75,000£90,000 depending on experience ~ Bonus and Company Benefits ~ Full-time position ~ Five days per week onsite in Manchester ~ Occasional UK travel may be required. ~ Implement and maintain security controls across on-premise VMware infrastructure. Lead the configuration and optimisation of VMware NSX, distributed firewall policies and micro-segmentation. Work with VMware vDefend to support zero-trust principles and reduce lateral movement risk. Configure and manage Palo Alto next-generation firewalls, including policy creation, threat-prevention profiles, NAT and VPNs. Secure Windows Server, Active Directory and Group Policy environments in line with recognised security standards. Support security monitoring, logging, alerting and incident response using Elastic Stack and Elastic Security. Contribute to vulnerability management, root-cause analysis and remediation activity. Support security controls across VMware Cloud Foundation, AWS, Azure and GCP. Embed security into operational processes and DevSecOps practices. Strong hands-on experience within security engineering, infrastructure security or network security. Proven VMware NSX experience, including micro-segmentation and distributed firewall policies. Experience with VMware vDefend or closely related VMware security technologies. Good Cisco networking and security knowledge. Extensive Windows Server, Active Directory and Group Policy security experience. Knowledge of zero-trust, network segmentation, IAM, encryption and secure architecture. Strong TCP/IP networking knowledge, including routing, VPNs and secure connectivity. Experience with Elastic Stack or Elastic Security would be highly advantageous. Exposure to cloud security, DevSecOps, Linux hardening, container security or regulated government environments would also be useful. This is an excellent opportunity for a practical Security Engineer to take ownership of meaningful technical work within a high-security environment using modern infrastructure and security technologies.