Network & Security Systems Engineer

Overview of the Role

The Network & Security Systems Engineer is a hands-on technical role responsible for the implementation, administration, troubleshooting, and operational support of enterprise network and security infrastructure across cloud, hybrid, and managed environments. 

This role acts as a Tier 2/3 escalation point for complex network, firewall, connectivity, and security incidents, ensuring reliable, secure, and high-performance connectivity across the organisation. 

Responsibilities:

• Configure, administer, troubleshoot, and maintain enterprise network infrastructure across cloud and on-premise environments.  

• Operate and support firewalls, including policy management, VPNs, NAT, routing, and security rule troubleshooting.  

• Manage and troubleshoot Cloudflare services, including WARP, Zero Trust, Secure Web Gateway, DNS Security, and remote access services.  

• Implement and support SD-WAN, VPNs (IPSec / SSL), site-to-site connectivity, and secure remote access solutions.  

• Troubleshoot network connectivity issues including LAN/WAN, routing, switching, VLANs, DNS, DHCP, and performance-related incidents.  

• Act as a Tier 2/3 escalation point for complex network and security incidents from Service Desk, internal IT, and MSP support.  

• Perform root cause analysis (RCA) and implement remediation for recurring network and security issues.  

• Monitor and respond to security alerts, incidents, vulnerabilities, and threat intelligence events.  

• Perform firewall rule reviews, security policy tuning, and access control validation.  

• Support network segmentation, Zero Trust implementation, and secure access controls.  

• Assist with vulnerability remediation, security hardening, and risk mitigation activities.  

• Support Microsoft 365 security configuration including Defender for Office 365, Exchange Online Protection, and related security controls.  

• Collaborate with Platform Engineering, Security, and Service Delivery teams to resolve cross-domain incidents.  

• Maintain and update network diagrams, firewall rulesets, configuration documentation, and operational runbooks.  

• Support business continuity, disaster recovery, and cyber resilience testing activities.  

• Participate in infrastructure upgrades, migrations, and change implementations.  

• Provide operational support for endpoint and network security tools including EDR, SIEM, and monitoring platforms. 

Requirements

• 5+ years of hands-on experience in Network Engineering, Security Engineering, or Infrastructure Operations roles.  

• Strong experience configuring and troubleshooting FortiGate firewalls in production environments.  

• Solid experience with Cisco networking (routing, switching, VLANs, QoS, DNS, DHCP).  

• Hands-on experience with SD-WAN and enterprise WAN/LAN environments.  

• Strong understanding of VPN technologies (IPSec, SSL VPN, site-to-site tunnels).  

• Experience operating Cloudflare Zero Trust, WARP, DNS Security, Secure Web Gateway services and SASE solutions. 

• Strong troubleshooting experience across hybrid cloud and on-prem network environments.  

• Experience with Azure networking concepts and cloud connectivity troubleshooting.  

• Familiarity with endpoint security, EDR platforms, and security monitoring tools.  

• Experience supporting Microsoft 365 security controls (Defender for Office 365, EOP, etc.).  

• Strong incident response, troubleshooting, and root cause analysis capability.  

• Experience working in environments with MSPs and internal IT escalation structures.  

• Certifications such as CCNP, Fortinet NSE, Security+, Microsoft Security, or equivalent are highly regarded.