Network Security Engineer

Location : Home
Closing Date : 15/12/2017
Employment Type : Permanent
Department : Group IT - Technical Services & IT Programmes

London based. Primarily working from home UK/Worldwide Travel to be expected

The Network Security Engineer will become an integral part of the Global Infrastructure Team supporting day-to-day business-as-usual operations and current and future infrastructure project initiatives, domestically and internationally, for BPP.

Network Security Engineer will define, implement, uphold and maintain standards, safeguarding the enterprise infrastructure and resources that BPP and partners rely upon every day, in campus, in its data centres as well as remote locations

Job Background:      

The Network Security Engineer Role is a third line role and as such is the highest point of internal escalation responsible for acting on all technical requests, projects, and strategic initiatives, for technologies related to this role. Additional responsibilities include routine contact with appropriate IT and non-IT personnel from BPP Group of companies. As needed, individual will act as expert level resource on reported incidents in the client environment including mentoring and the training of IT Operations Centre (ITOC), the IT Security Operations Centre (ISOC) and BPP Infrastructure staff.

Key Responsibilities:

  • To mentor and lead other technical engineers and technical personnel.  To communicate Network/Network Security Engineering strategy, industry standards, and participate in the advancement of relevant technology and business standards/policies team-wide.
  • To lead/facilitate meetings and conduct presentations to technical and business staff.  To communicate technical concepts and proposals into understandable and justifiable business initiatives.
  • To participate in the definition of specific technical design, product selection, device standardization.
  • To proactively implement, update, maintain, manage, monitor, and support enterprise network and systems infrastructure.
  • To perform change control and device configuration management activities on all network systems.
  • To lead network architecture and design initiatives with full documentation to ensure consistency, accuracy and supportability.
  • Maintains technical overview of client environment. This includes (but is not limited to) incident / problem tracking, and ensuring junior engineers maintain delegated tasks in kind by mentoring and both technically and professionally. Researches problem information to proactively identify trends and potential sources of new problems while preventing the replication of issues within the environment. Acts as SME for escalated issues and questions from ITOC, ISOC and Global Infrastructure Team members.
  • Through continuous review, ensures all open incidents for Apollo Global companies are being worked to resolution; escalates any aged issues to management as needed displaying a sense of ownership and accountability. Works with clients to understand the business needs of clients to create solutions to fit their needs.
  • Primary driver for development and delivery of project / BAU activity within the environments, ensuring resourcing and project management needs are met via delegation and guidance of peers, other members of the Global Infrastructure team, ITOC and ISOC.
  • Functions as the highest level point of contact in receiving client requests for resolution. Takes ownership of call and employs established automated and manual processes to ensure a complete, expedient and high quality resolution to client service requests.
  • Provides technical and procedural support to ITOC, ISOC and Global Infrastructure team members via request or by initiating consultation in high volume situations.
  • Provides research and documentation on major incidents and problems, developing complete documentation on impact and root cause of issues.
  • Assists in the development of standard operating processes, procedures and policies in a dynamically changing business environment that will result in high quality and cost effective client service.
  • Assists management in developing/delivering training programs for BPP Infrastructure Team and Service Desk staff, including the population of knowledge-based systems (IT 360) with problem resolution tips and best practices.
  • Responsible for maintaining and improving department performance and security through mentoring of personnel. Involvement in long-term planning, continual process improvement initiatives.
  • To evaluate and anticipate the impact of technical solutions related to assigned projects.
  • Authors and/or participates in the creation of technology documents and white papers that address and communicate domain specific architecture and design, concepts, and strategic direction.
  • To provide consultation to developers, architects, engineers and business stakeholders.
  • To define performance requirements for technology solutions. 
  • To support the Senior Network Security engineer
  • To identify, analyse and enhance technical designs to address potential performance issues.  To perform scalability and sizing assessments.

Knowledge, Skills and Experience:

  • Expert Knowledge in Network Security Proficiency with vulnerability management, scanning and monitoring tools
  • Experience with Provider-1 or Check Point's Smart Center management station, Load balancing Big-IP F5.and configuration system
  • Experience in Bluecoat Proxy
  • Experience in Cisco Meraki MX appliance
  • Experience with security regulations in compliance legislation and other directives, including PCI and Sarbanes Oxley and international Security Standards (e.g. OWASP, ISO 27002)
  • Experience with penetration testing process and procedures
  • Expert knowledge of Cisco Technologies; specifically IOS, NXOS, concepts of VLANs and Dynamic Routing Protocols (OSPF, BGP), Cisco WiFi and DMVPN
  • In depth knowledge of the OSI networking model and TCP/IP protocols
  • Experience of LAN switching and WAN technologies, or experience involving transmission/traffic engineering and operations also required
  • Familiarity of Internet technologies and tools (e.g. Apache, IIS, Tomcat, Weblogic, SMTP, SSL, DNS, firewalls, proxy devices, load balancers)
  • Working in a global follow-the-sun environment as an integral part of the global team following ITIL processes for incident, problem, and change management
  • Proficiency with systems administration in both UNIX and Windows platforms

 

It is essential that candidates possess the following skills and competencies

  • Achieving Results – Be aware of key business objectives, and ensure these are applied appropriately to all business activities.
  • Building Relationships – Able to develop effective relationships with all Apollo Global and client staff, and be recognised as providing a supporting role.
  • Commercial and Business Awareness – Able to balance the financial, quality, people and customer expectation related risks.
  • Customer Focus (internal & external) – Able to anticipate and understand customer expectations, and ensure customer requirements are met and expectations appropriately managed. Able to build partner relationships with customers, and focus on solving their problems.
  • Communication – Effective communication skills suitable for the management of and liaison with departmental staff and senior management, both on a one to one and one to many basis. Demonstrate effective communication, both orally and in writing, with subordinates, colleagues, clients and customers including producing reports, preparing, organising and delivering presentations using appropriate tools and techniques, and taking a leading role in meetings and discussions.
  • Planning and Organising – Effective at determining a course of action by breaking it down into smaller steps and by planning and resourcing each of these, making allowance for potential problems. Must manage the field of responsibility within allocated budgets, and be able to plan and forecast future budgets based on business priorities.
  • Understanding Apollo Global – Aware of BPP strategies, policies and procedures. Aware of how the organisation operates.
  • Teamwork – Able to contribute effectively towards the objectives of a team, and be able to share knowledge, ideas and information. Aware of the needs, objectives and constraints of those in other disciplines and functions.
  • Problem Solving and Decision Making – Able to solve problems in a measured and creative way. Capable of independently assessing a wide variety of tasks, and be proactive in relation to identifying and undertaking activities that are to the benefit of the business. Able to balance long and short term objectives, and understand business value. Be responsible for own decisions.
  • Influencing and Impact – Act in a professional manner, and exhibit the required behavior that should act as an example to other employees. Needs to delegate tasks, responsibilities and authorities effectively. Effective at identifying goals and objectives, and motivating and leading others towards their achievement. Able to network throughout the wider IT community.
  • Innovation, Flexibility and Adaptability – Undertake tasks with a positive attitude and respond well to management and client requests. Working locations may include a variety of Apollo Global client sites. Must be prepared to meet business goals and respond well to change.

 

  • Strong experience and/or training in Network Security Engineering and a strong acumen in the other technologies outlined in this job description.
  • CCNA essential.  CCSP/CCIE desirable.