At a Glance
- Tasks: Join a dynamic team to optimise firewall and routing configurations for critical data centre migrations.
- Company: Sekuro, a global leader in cybersecurity consulting with a fresh approach.
- Benefits: Remote work, competitive pay, and opportunities for travel and professional growth.
- Other info: Exciting opportunity for career advancement in a supportive and innovative environment.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technologies.
- Qualifications: Extensive experience with enterprise firewalls and strong communication skills required.
The predicted salary is between 50000 - 65000 £ per year.
6 Month contract ASAP Start Remote in the UK with travel required to Poland or Madris as required About Sekuro We're a founder-led global consulting company in the cybersecurity market, operating across Australia, Asia, and the UK.
Our reputation is built on breaking away from traditional consulting models, embracing a direct and fresh approach that puts clients at the centre of everything we do.
Our mission is simple: to be our clients' most trusted security partner by delivering impactful outcomes that build resilience, enable innovation, and improve competitiveness.
Our vision is to be the world's most trusted security partner, enabling organisations to protect today and prepare for tomorrow.
We exist to secure organisations, empowering them to thrive in a digital world.
We live by our values: we are brave, we raise the bar, we tell it how it is, we own the outcome, and we care for all.
About the Role Sekuro is looking for an experienced Firewall and Network Security Engineer for a critical data centre migration programme on behalf of one of our clients.
The role will be embedded as a genuine working member of the client's EMEA infrastructure team, reporting to the EMEA Head of Information Security.
The scope covers two data centre facilities in Poland and a DR site in Madrid.
The objective is straightforward; assess the existing firewall and routing environment, build a clean and optimised policy set from the ground up, and deliver a migration-ready configuration that enforces proper segmentation, least privilege access, and a materially reduced risk profile before migration execution begins.
What You'll Do In this role you will perform a detailed review of all existing firewall rule sets (L3–L7) and routing configurations (BGP, OSPF, static routes), mapping traffic flows to the target three-tier architecture and validating zone placement and access policies.
From there, the focus shifts to identifying and documenting redundant, obsolete, overly permissive, conflicting, and non-compliant rules, as well as validating segmentation across DMZ, Internal segments and country-specific sub-nets.
Working closely with the programme teams, you will develop rulebase optimisation recommendations and deliver a clean, portable, and auditable configuration ready for cutover.
A comprehensive Firewall and Routing Assessment Report A Firewall Rule Rationalisation Matrix (retain / modify / remove) A gap analysis against the three-tier architecture model and internal security policies A proposed future-state rule design aligned with segmentation zones A prioritised risk assessment with remediation recommendations A migration-ready, optimised firewall rule set An executive summary for senior stakeholders What You'll Need You will bring extensive hands-on experience across enterprise firewall platforms including Palo Alto Networks, Check Point, Fortinet, and Cisco ASA/Firepower, combined with strong expertise in network segmentation, L3–L7 traffic filtering, and routing protocols.
A proven track record in data centre migrations and firewall rule auditing at scale is essential, as is a solid grounding in three-tier architectures and Zero Trust principles.
Just as important as the technical ability is the capacity to communicate clearly; this role requires someone who can engage confidently with network engineers and executive stakeholders alike and produce documentation that is structured, precise, and actionable.
Experience with cloud networking (Azure/AWS), micro-segmentation, rule analysis tools such as Algo Sec, Tufin, or Fire Mon, and certifications including CISSP, CCSP, PCNSE, or CCNP Security would all be well regarded.
Please note: Our recruiter Tim Smith is based in Sydney , Australia and will be calling on Whatsapp from a +61 number
Network Security Engineer employer: Sekuro
Sekuro is an exceptional employer that prioritises employee growth and development within a dynamic and innovative work culture. As a global consulting company in the cybersecurity sector, we offer our team members the opportunity to work on impactful projects while collaborating with talented professionals across various regions. With a commitment to flexibility, including remote work options and travel opportunities, Sekuro empowers its employees to thrive in their careers while making a meaningful difference in the digital world.
