Network & Security Engineer

Job Description

Assist in designing, configuring, managing, and troubleshooting routers, switches, firewalls, and wireless access points. Optimise network performance by configuring VLANs, implementing IP routing protocols such as BGP, OSPF, and EIGRP, and establishing NAT policies. Investigate, identify and improve LAN, WAN, SD-WAN & VPN infrastructure. Assist with evaluating, selecting, and delivering internet connections for our retail stores. Assess, evaluate, and remediate vulnerabilities reported through vulnerability scan reports, ensuring compliance with industry standards (PCI, GDPR, etc). Evaluate and utilise open-source tools like OpenVAS/Nessus to improve vulnerability assessment & auditing techniques in the infrastructure to maintain compliance. Manage security policies with IPSec, VPN, firewall protocols, IDS/IPS, NAC, Zero Trust Networking, micro-segmentation, and enhanced measures. Implement and set up network monitoring tools like Zabbix or Nagios to automate the analysis of network logs and improve visibility. Implement automated patch management, threat detection, and response workflows. Define & document HA & DR strategies for network infrastructure. Work closely with the Systems Support Team, TechOps Team & Tech Support Team. Stay informed about the latest advancements in network technologies and the evolving security standards within the industry. Participate in knowledge-sharing sessions and contribute to a culture of continuous learning. Required Skills: High proficiency with network device administration of firewalls, switches, APs, etc. Strong experience in managing wireless network management & addressing technical issues. Good understanding of Cloud networking technologies Experience in security vulnerability assessment tools like Qualys, OpenVAS, etc. Strong understanding of IPSec tunneling, OpenVPN, Zero-trust networking, etc. Desired Skills: Certification is preferred in CCNP, AWS/GCP Certified SecOps, or CompTIA Network+ / Security+. Familiarity with SD-WAN, IPv6, ITIL, NIST, ISO 27001, PCI standards Experience configuring Cisco Meraki, Ruckus, pfSense and Draytek network devices and platforms. Experience in scripting with shell or Python. Welcoming attitude towards open-source solutions & tools. Strong ability to explain technical concepts to stakeholders across the wider business.