Network Security & Infrastructure Engineer

This hands-on, senior role requires the design, implementation and administration of enterprise network, security and infrastructure solutions, as well as providing expert third-line support and guidance to colleagues and key stakeholders. Working as part of a small, collaborative team, the role will lead projects and support continuous service improvement.

Client Details

The hiring organisation is a well-established company within the FMCG industry. It operates on a large scale, providing quality products and services to a diverse customer base. They are committed to leveraging technology to maintain and improve their operational excellence

Description

Own SolarWinds monitoring alerting, and reporting; integrate with Splunk for observability

Manage Cisco and Meraki licensing, support, and lifecycle (incl. CX Cloud Collector)

Maintain accurate documentation for IP address plans, DNS/DHCP/forwarding, and structured cabling

Administer NetApp support contracts for Milestone and Hikvision platforms

Configure and operate Cisco C9200/C9300 access/core switches, Nexus, and UCS fabrics

Manage intersite WAN, internet circuits, DMZ transit, guest networks, SIP, and L2 pseudo WAN connections

Engineer and manage Get VPN routers, certificate servers, and site-to-site/remote VPNs

Integration/admin of RADIUS/AAA across devices

Own ASA firewall (DMZ), Cisco Firepower/FMC (edge security), user policies, outbound/inbound/NAT rules, TALOS

Administer DUO MFA for VPN/admin access

Enforce wired/wireless 802.1X/MAB standards and Identity Services Engine (ISE) configurations

Maintain certificate management (PKI; device/user/VPN/GetVPN/ISE certs)

Support UCS/Fabric Interconnects, ISE and Firepower servers, SolarWinds, NetApp storage

Operational support for Milestone and Hikvision NVR platforms

Administer and support IP CCTV platforms: Milestone, Hikvision, PoE cameras, ANPR, facial recognition

Support Cisco video conferencing, Miracast, Extron controls, media conversion, wall screens, and streaming feeds

Maintain high-quality and current documentation

Participate in project management and continuous service improvement

Adhere to security, data protection, and evidence handling policies

Profile

CCNP-level knowledge (switching, routing, ISE, VPN/GetVPN)

Strong Cisco switching (C9200/C9300/Nexus), routing, VLANs, STP, EtherChannel, HSRP/VRRP, QoS

Advanced Firepower (FMC/FTD) & ASA with secure policy design, NAT, VPNs, TALOS

Meraki (MR/AP, MX) multi-SSID management and enterprise authentication (802.1X/IPSK/MAB)

SolarWinds administration and Splunk integration

DNS/DHCP/IPAM and IPv4 subnetting

WAN/MPLS & L2 circuits, DMZ, SIP, site-to-site VPNs, remote access

UCS fabrics basics, NetApp video storage familiarity

RADIUS/AAA, wired/wireless 802.1X and MAB, ISE policy sets, profiling, dACLs, and guest portals

Certificate/PKI management (VPN, ISE/EAP-TLS, GetVPN)

DUO MFA admin and device integration

CCTV: Milestone/Hikvision, hands-on incident evidence handling

AV: Cisco VC, Extron programming, media conversion, wall screens

Core electronics fault-finding and structured cabling knowledge

Excellent Wireshark and troubleshooting aptitude

Job Offer

Competitive Salary

Discretionary annual bonus of approximately one month's salary

25 days annual leave, rising to 28 days with service

On site staff restaurant (fully subsidised),

Defined contribution pension scheme (min. 3% employee, fixed 5% employer),

Salary Extras discount scheme, including Cycle to Work

Discounted Watch Purchase Scheme