Average Network Engineer salary in the UK

We are searching for an experienced Network Security Engineer to be responsible for ensuring the Group's IT Networks and Communications are well designed, secure, optimal and function consistently across all internal and external operations. IT and Cyber Security is extremely important and is key to all our client's operations and you will play an extremely vital role in developing and maintaining security services throughout the business. The role is offered on a hybrid-working basis with up to 2-days per week working from home. The role requires you in the office at least 3-days per week so you MUST live within a commutable distance of Exeter to be considered for the position or you will be looking to relocate to the area. The role comes with excellent benefits! In this role you will be responsible for the following: Reviewing and managing network security services in line with Group security objectives and policies.Monitoring and administrating the security of both internal and external corporate network communications, including, routers, switches, firewalls, DMZ, servers, Wi-Fi, OT, telephony and LAN/WAN/VPN communication services.Constantly reviewing the IP space across the organisation ensuring that the TCP/IP stack, VLANs, IP Subnet, DNS, DHCP, VPNs, and VoIP traffic is well designed, secure and optimised.You will ensure best practices are used for delivering network security. Continually monitoring, maintaining and testing the threat landscape and security posture.Provide regular service status updates to line management and agree and monitor service availability targets.Manage all SSL and external web server security functions to ensure data protection, systems integrity and user confidence at all times.Manage NIS2 and GDPR privacy policies and operational practice.Perform regular reviews of security solutions and processes, identifying opportunities for optimisation to over two hundred office, home and field-based employees.Provide day-to-day cyber security guidance and support to relevant technical & business stakeholders.Deliver annual penetration testing and implement recommended improvements.Research latest network cyber threat developments and recommend any actions that will improve network performance and security.Work closely with NIBE SOC teams and internal security engineers to ensure all preventative security measures are implemented and Zero Day / critical threats are extinguished in line with internal resolution targets. Collaborate with other business teams to ensure the proper use of systems.Coordinate investigations and reporting of security incidents related to Network, Systems and Applications. Diagnose root causes of system failures and implement appropriate corrective actions.Assist with OT process and system change management, overseeing testing and approval of changes using an approved methodology.Ensure all network hardware assets are identifiable and updated in the asset management system.Provide technical expertise to support the maintenance of our hardware infrastructure systems and services.Work closely with NIBE IT teams to ensure Group IT policies are continually checked and in place. Required Experience A computer related degree or relevant professional certification and accreditation is preferred.Extensive commercial experience in an IT security role maintaining secure networks in a MS-Windows and Linux environment.Expert knowledge of and experience in LAN/WAN/VLAN communications, VPN configuration and enterprise wireless networking. Experience of Dell core and edge switches with fibre is preferable.CCNA/CCNP equivalent accreditation is advantageous but is not essential.Experience and excellent working knowledge of GNS3 (or similar) is really beneficial.Firewall configuration, management and monitoring experience is essential. Experience of FortiGate products preferable.TCP/IP networking stack, DNS, DHCP, RADIUS/AAA, Active Directory, SSL, 2FA, OT skills are essential for this position.Knowledge of information security standards (e.g., ISO 17799/27002/27001/PCI DSS/SIEM, etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.) and key network security principles for risk identification and analysis.Knowledge of Linux OS and Windows Server and desktop operating systems configuration & troubleshooting and SCCM/MECM skills are preferrable.Knowledge of and experience in virtual network technologies, specifically ESXi and VMware configuration and administration is advantageous.Knowledge of MDM products, CrowdStrike and Cortex XDR configuration and administration would be advantageous.Experienced user of Office 365, Teams, OneDrive, SharePoint etc. - any MS E3 subscription services.Excellent troubleshooting, diagnostic, problem-solving and communication skills.Flexibility to work on planned, out of hours systems projects if required.Training is available for the right candidate to ensure complementary skills are acquired. Please note that due to a high level of applications, we can only respond to applicants whose skills and qualifications are suitable for this position. No terminology in this advert is intended to discriminate against any of the protected characteristics that fall under the Equality Act 2010. Bowerford Associates Ltd is acting as an Employment Agency in relation to this vacancy.

Team purpose The Network Platform team will own and develop (with the Enterprise Architecture team) the strategic network roadmap. Delivering changes, product development and maintenance required to achieve the objectives of the roadmaps. The team will also provide support and technical expertise in the case of a major incident. They work closely with third-party partners to deliver a safe, resilient, robust Network Platform and continuously review the industry and market, testing new concepts and technologies that can add value. Your purpose The Network Security Engineer supports the Lead Network Security Engineer in delivering the Network Security Roadmap. This role supports the implementation of Infosec-driven initiatives and acts as the second line of escalation for Network Security Incidents and ad hoc service and portfolio support requests. This role is accountable for establishing and maintaining secure network configurations, including firewalls, routers, switches, and VPNs, and periodically reviewing firewall rules and user access to the network. The Network Security Engineer focuses on continuous improvement through automation and tooling, working with Security Operations to monitor and analyse network traffic for malicious activity or potential breaches. Additionally, this role implements network access controls, enforces robust patch management for network devices, and works with network security partners to identify network vulnerabilities, planning and implementing upgrades to ensure the highest standards of network security. This role is required to participate in an on-call rota for out-of-hours escalations for the Global Network Team. Your role Support Network Security Roadmap: Assist in delivering the Network Security Roadmap. Subject Matter Expertise: Provide network subject matter expertise on Infosec-driven initiatives. Incident Escalation: Second line of escalation for network security incidents, as well as specific security Service and Portfolio Requests i.e. Meraki configuration and firewall changes. On Call Rota: Participate in on-call rota and occasionally work out of regular business hours to facilitate change management and incident resolution. Secure Network Configurations: Establish and maintain secure network configurations including Cisco Meraki and Palo Alto firewalls, routers, switches, and VPNs. Firewall and Access Review: Periodically review firewall rules and user access to the network. Continuous Improvement: Focus on continuous improvement through automation and tooling. Monitoring and Analysis: Collaborate with Security Operations to monitor and analyse network traffic for malicious activity or potential breaches. Access Controls: Implement network access controls to ensure only authorised users and devices can access specific network segments. Vulnerability and Patch Management: Identify and manage the remediation of network vulnerabilities and upgrades to ensure the highest standards of network security. This includes vulnerability management of the store Meraki estate. Perform robust patch management for network devices. IT Values Commitment: Champion and commit to performing the role within recognised Values & Behaviours. What you'll bring Advanced Expertise in network solutions including MPLS, Internet, Cloud services, Firewalls, Routers, switches, Palo Alto, Meraki, and Cisco services. Bachelor's degree in relevant field and/or industry recognised certifications i.e. Cisco Certified Network Associate (CCNA). Proficiency in establishing secure network configurations, including firewalls, routers, switches, and VPNs. Experience with network access controls, vulnerability and patch management. Experience in implementing network-security solutions. Excellent verbal and written communication skills to articulate technical concepts to both technical and non-technical stakeholders. Expertise in monitoring and analysing network performance and incidents. Previous experience participating in on-call rotations and managing out-of-hours incidents effectively. Strong analytical skills to assess complex technical problems and develop effective solutions. Expertise in troubleshooting and resolving network security-related issues. Ability to work closely with cross-functional teams, including architecture, infosec and regional implementation teams. Dedication to performing the role within recognised values and behaviours.

Network Engineer/Designer | London | Azure Networking | Design | Financial Services If you're a Network Engineer with Financial Services experience and strong Azure networking skills, I want to hear from you ASAP Location: London (Two days per week in office)Salary: Up to £82k (DOE) plus bonus and benefitsNo sponsorship is available for this role.This is a hands-on technical role with design authority. You will own Low-Level Designs, drive network automation, and ensure hybrid infrastructure (data centre and cloud) is secure, scalable, and future-ready.You'll work closely with our Infrastructure and Architecture teams to deliver strategic network solutions in a regulated, high-performance environment. You'll be: Designing and deploying LAN, WAN, WLAN, and SD-WAN solutions across on-prem and cloudActing as Azure networking SME, owning integration, security, and governanceDriving network automation to streamline provisioning and managementLeading on network security design: zero trust, firewalls, VPNs, policy-based routingManaging lifecycle strategy: patching, vulnerability governance, capacity planningProviding technical escalation and occasional out-of-hours support What we're looking for: 5+ years in network infrastructure roles, Financial Services preferableDeep experience with Azure networking (VNets, vWAN, ExpressRoute, NSGs)Strong SD-WAN design and deployment skillsFamiliarity with Aruba, Cisco, Fortinet, Sophos firewallsHands-on with automation tools (Ansible) and config managementComfortable in a regulated environment with high compliance standards Call Lorenz Pasch @ Hays ASAP if you are interested in this position. My contact details are available on my LinkedIn profile. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk