Azure Network Security Engineer

Azure Network Security Engineer - mostly at home, some travel M62 corridor

Role Purpose

1. Azure - networking and security, Terraform, GitHub and Azure DevOps, Azure NSGs, UDRs, Peerings, vNets, Landing Zones and ExpressRoutes, Azure vWAN.
2. Fortinet product suite incl Gate, AP, Authenticator, Analyzer and Manager.
3. Akamai, Zscaler.

The business needs a Senior Azure Network Security Engineer to be based out of our Leeds office; however, the role will largely be spent at home. Travel to Leeds, Liverpool, London, and other national and international sites may be required as projects dictate.

Working as part of the central Network Services Team based across Leeds and London, you will assist with daily operations and service improvements.

You will be required to work on project delivery and provide support services to Business and IT teams.

Skills to include Problem Solving, Troubleshooting, Communication, and Documentation. You will assist with remediating audit or security findings, providing evidence as required to ensure the company adheres to best practices and security policy.

In this role, you will work closely with Infrastructure, Architecture, Business Application, and Security teams.

This position may require you to provide on-call escalated support in the event of major incidents.

Key Accountabilities and Main Responsibilities

1. Strategic Focus
   1. Continuous improvement - Develop systems and services to be secure and efficient to meet the demands of the business.
   2. Cost Management - review and be mindful of costs and adhere to existing controls surrounding cloud deployment.
   3. Strategic Direction - anticipate future IT and business requirements and propose solutions to capture and maximize efficiency, cost, and automation opportunities.
   4. Procedures and Policy - Adhere to procedures and processes around Change management and use systems in line with SLA's and standards to improve the IT Network Security environment.
2. Operational Management
   1. Project Management - Playing a key role in the delivery of projects and deployments in the Network space.
   2. SME / Key Contact - Act as a point of contact for incidents to IT teams. Provide prime point of contact and SME in times of major system outages.
   3. Operations - Respond to all Network related Incidents in line with SLAs as required.

Experience & Personal Attributes

1. 5+ Years experience working with Microsoft Azure in a Networking and Security capacity. Demonstrate knowledge through understanding of key components in the Azure workspace environment.
2. Familiarity in using Terraform, GitHub, and Azure DevOps to undertake deployment tasks.
3. Experience and understanding in Azure NSGs, UDRs, Peerings, vNets, Landing Zones, and ExpressRoutes.
4. Experience in creating and using Azure vWAN is a plus along with a good understanding of BGP routing protocols and VPNs.
5. Experience and good understanding of the Fortinet product suite incl Gate, AP, Authenticator, Analyzer, and Manager.
6. Experience and understanding of 802.1x to secure the on-premise LAN networks.
7. Familiarity of Akamai in a cloud environment.
8. Experience and understanding of Cisco Switch environments.
9. Experience of using Zscaler ZIA & ZPA to manage internet security and remote access to core systems.
10. Experience of using ServiceNow and understanding of the ITIL framework.
11. Experience of Solarwinds Monitoring and Configuration Manager.
12. Identify and mitigate security risks and ensure IT security design and delivery.
13. Friendly approachable demeanor to staff who are not from a technical background and the ability to communicate complex scenarios into a basic level for them to gain an understanding.
14. A keen eye for detail and accuracy and taking pride in the work you deliver.
15. AZ-700, NSE v7 or other certifications are desirable.