Network and Infrastructure Engineer (Security Focused)

Role Purpose

The Network and Infrastructure Engineer is responsible for the monitoring, support, security and operational stability of the firm’s network, infrastructure, and core IT services. Operating within a regulated legal environment, this role places strong emphasis on service availability, security, vulnerability management, incident response and regulatory compliance, ensuring systems remain resilient and available to support fee earners and business‑critical legal services. A key focus of the role is security and vulnerability remediation, requiring strong hands-on experience in identifying, tracking and remediating vulnerabilities using industry-standard monitoring and security tools. The role operates as a first and second line operational support function, acting as a point of escalation for the IT Service Desk and working closely with Network, Security, Applications and Service Delivery teams, as well as third‑party suppliers.

Key Responsibilities

• Network, Infrastructure & Service Monitoring
  • Monitor network, server, cloud and security platforms using NOC and monitoring tools (e.g. dashboards, alerting, SIEM outputs).
  • Identify, diagnose and respond to incidents affecting: WAN, LAN and Wi‑Fi, SD‑WAN and VPN connectivity, Firewalls, Cloud connectivity and SaaS services.
  • Proactively investigate alerts to prevent service degradation or outages.
  • Perform routine system health checks, maintenance and operational validation.
• Incident, Problem & Change Support
  • Act as an escalation point for incidents and service requests from the IT Service Desk.
  • Support incident resolution across network, infrastructure and security domains, escalating where required.
  • Identify recurring issues and contribute to problem management and continuous improvement.
  • Support change windows, including: Pre‑change readiness checks, Post‑change validation and assurance.
  • Work collaboratively with project teams to plan, test and implement technical changes as required.
• Security & Vulnerability Management
  • Monitor for security‑related events and collaborate closely with the Information Security and SOC function.
  • Support vulnerability remediation activities, including: Coordinating and validating patching activities, Tracking remediation actions and residual risk, Supporting vulnerability scanning and reporting (e.g. Tenable).
  • Assist with security incident response, diagnosis, containment and remediation.
  • Ensure operational practices align with firm security policies, ISO 27001, Cyber Essentials Plus, and client security requirements.
  • Support access control verification, logging, audit evidence gathering and compliance reviews.
• Operational Excellence & Documentation
  • Maintain accurate and up‑to‑date documentation, including runbooks, operating procedures and network diagrams.
  • Recommend monitoring, tooling or process improvements to improve service resilience and security.
  • Support onboarding of new offices, network services or infrastructure changes.
  • Liaise with third‑party suppliers and telecoms providers during incident and fault resolution.
  • Share knowledge across the IT team, ensuring information is current, accessible and reusable.

Skills, Knowledge & Experience

• Essential Experience
  • Proven experience in a NOC, network operations, or infrastructure support role.
  • Experience supporting business‑critical systems in a high‑availability environment.
  • Strong working knowledge of ITIL incident, problem and change management.
  • Hands‑on experience with security monitoring and vulnerability remediation activities.
• Technical Knowledge
  • Strong understanding of: TCP/IP, DNS, DHCP, routing and switching, LAN, WAN and SD‑WAN technologies, Firewalls and VPN technologies.
  • Experience with: Monitoring and alerting platforms and dashboards, Security and vulnerability tools (e.g. Tenable, Microsoft Sentinel, SIEM platforms), Microsoft technologies, including: Windows Server and Windows 10/11, Active Directory, Group Policy, Microsoft 365 and Exchange Online, SCCM and Intune, Infrastructure and enterprise services, including: VMware (virtualisation and VDI), Palo Alto firewalls, Email and security platforms (e.g. Mimecast, endpoint protection), Telephony, mobile device management and AV solutions, Cloud and hybrid technologies: Azure and/or AWS IaaS, PaaS and SaaS services, Hybrid and managed service environments, End‑user compute security, including patching and anti‑virus.

Personal Attributes & Behaviours

• Calm, methodical and effective under pressure.
• Strong attention to detail with a security‑first mindset.
• Highly security conscious and confidentiality aware.
• Customer focused, with a strong appreciation of the impact of IT on legal services.
• Clear and professional communicator with strong documentation skills.
• Willing to participate in out‑of‑hours support, on‑call or shift rotas where required.

Additional Information

The role operates within a regulated legal environment and requires a strong understanding of confidentiality, integrity and availability principles. The post holder will play a key role in supporting the firm’s cyber security posture, operational resilience and compliance obligations.