Network And Infrastructure Engineer (Security Focused) in Bristol

Network and Infrastructure Engineer is responsible for the monitoring, support, security and operational stability of the firm’s network, infrastructure, and core IT services. Operating within a regulated legal environment, this role places strong emphasis on service availability, security, vulnerability management, incident response and regulatory compliance, ensuring systems remain resilient and available to support fee earners and business‑critical legal services.

A key focus of the role is security and vulnerability remediation, requiring strong hands‑on experience in identifying, tracking and remediating vulnerabilities using industry-standard monitoring and security tools.

The role operates as a first and second line operational support function, acting as a point of escalation for the IT Service Desk and working closely with Network, Security, Applications and Service Delivery teams, as well as third‑party suppliers.

Key Responsibilities

Network, Infrastructure & Service Monitoring

• Monitor network, server, cloud and security platforms using NOC and monitoring tools (e.g. dashboards, alerting, SIEM outputs).
• Identify, diagnose and respond to incidents affecting:
  • WAN, LAN and Wi‑Fi
  • SD‑WAN and VPN connectivity
  • Firewalls
  • Cloud connectivity and SaaS services
• Proactively investigate alerts to prevent service degradation or outages.
• Perform routine system health checks, maintenance and operational validation.

Incident, Problem & Change Support

• Act as an escalation point for incidents and service requests from the IT Service Desk.
• Support incident resolution across network, infrastructure and security domains, escalating where required.
• Identify recurring issues and contribute to problem management and continuous improvement.
• Support change windows, including:
  • Pre‑change readiness checks
  • Post‑change validation and assurance
• Work collaboratively with project teams to plan, test and implement technical changes as required.

Security & Vulnerability Management

• Monitor for security‑related events and collaborate closely with the Information Security and SOC function.
• Support vulnerability remediation activities, including:
  • Coordinating and validating patching activities
  • Tracking remediation actions and residual risk
  • Supporting vulnerability scanning and reporting (e.g. Tenable)
• Assist with security incident response, diagnosis, containment and remediation.
• Ensure operational practices align with firm security policies, ISO 27001, Cyber Essentials Plus, and client security requirements.
• Support access control verification, logging, audit evidence gathering and compliance reviews.

Operational Excellence & Documentation

• Maintain accurate and up‑to‑date documentation, including runbooks, operating procedures and network diagrams.
• Recommend monitoring, tooling or process improvements to improve service resilience and security.
• Support onboarding of new offices, network services or infrastructure changes.
• Liaise with third‑party suppliers and telecoms providers during incident and fault resolution.
• Share knowledge across the IT team, ensuring information is current, accessible and reusable.

Skills, Knowledge & Experience

• Proven experience in a NOC, network operations, or infrastructure support role.
• Experience supporting business‑critical systems in a high‑availability environment.
• Strong working knowledge of ITIL incident, problem and change management.
• Hands‑on experience with security monitoring and vulnerability remediation activities.

Technical Knowledge

Strong understanding of:

• TCP/IP, DNS, DHCP, routing and switching
• LAN, WAN and SD‑WAN technologies
• Firewalls and VPN technologies

Experience with:

• Monitoring and alerting platforms and dashboards
• Security and vulnerability tools (e.g. Tenable, Microsoft Sentinel, SIEM platforms)
• Microsoft technologies, including:
  • Windows Server and Windows 10/11
  • Active Directory, Group Policy
  • Microsoft 365 and Exchange Online
  • SCCM and Intune
• Infrastructure and enterprise services, including:
  • VMware (virtualisation and VDI)
  • Palo Alto firewalls
  • Email and security platforms (e.g. Mimecast, endpoint protection)
  • Telephony, mobile device management and AV solutions
• Cloud and hybrid technologies:
  • Azure and/or AWS
  • IaaS, PaaS and SaaS services
  • Hybrid and managed service environments
• End‑user compute security, including patching and anti‑virus.

Personal Attributes & Behaviours

• Calm, methodical and effective under pressure.
• Strong attention to detail with a security‑first mindset.
• Highly security conscious and confidentiality aware.
• Customer focused, with a strong appreciation of the impact of IT on legal services.
• Clear and professional communicator with strong documentation skills.
• Willing to participate in out‑of‑hours support, on‑call or shift rotas where required.

Additional Information

The role operates within a regulated legal environment and requires a strong understanding of confidentiality, integrity and availability principles.

The post holder will play a key role in supporting the firm’s cyber security posture, operational resilience and compliance obligations.

We value our employees highly and we want you to feel valued. You’ll receive a competitive salary with an annual pay review. You will also have access to an extensive range of benefits via our flexible benefits scheme including 25 days holiday (which will increase to 30 days based upon length of service) and private medical insurance.

At TLT we have a progressive fully flexible working approach. We empower our people to work in a place and at a time that meets their needs, those of their clients and of the wider team and firm. Part of this agile approach is a focus on hybrid working and supporting the work/life balance of our people.

Network and Infrastructure Engineer (Security Focused) • Bristol