Network & Security Engineer

Position Summary

Senior engineer who both leads the service and performs hands-on remediation on the most complex and security-critical systems. Owns KPI/SLA governance, prioritisation and risk sign-off, CAB representation, quality assurance, and mentoring of Engineers 1 and 2 — while personally fixing and patching network and security infrastructure (firewalls, NAC, IPS/IDS) and leading complex server, virtualization, and cloud remediation. Acts as the technical escalation point for both the onsite and offsite engineers and safeguards the integrity of the Customer-aligned KPIs.

Key Responsibilities

• Own the Customer-aligned KPI framework (Patch Time, Coverage, Availability); validate KPI calculation and monthly reporting accuracy.
• Provide prioritisation sign-off and risk classification for high-impact and critical findings; advise remediation approaches to system owners.
• Personally fix and patch security and network infrastructure — next-gen firewalls, NAC, IPS/IDS, routers/switches — and lead complex server, virtualization, and cloud remediation.
• Represent the service at the client's Change Advisory Board; enforce change governance, rollback rigour, and audit-ready evidence.
• Run aging and exception governance — surface stale findings weekly; document owner-side delays and risk acceptances per the SLA/service-credit model.
• Lead root-cause analysis of recurring vulnerabilities and drive continuous-improvement actions.
• Direct the daily work allocation between the onsite and offsite engineers and act as their technical escalation point.
• Quality-assure change records, re-scan evidence, and the weekly/monthly reporting pack before client submission.
• Mentor and develop the two engineers; maintain runbooks and cross-training so onsite and offsite coverage is interchangeable.

Basic Qualifications

• 6–10 years in network/security engineering with a strong vulnerability management background.
• Deep hands-on patching and upgrades of security infrastructure — next-gen firewalls (Palo Alto / Fortinet), NAC (Cisco ISE), IPS/IDS and network devices — plus servers, virtualization, and cloud.
• Familiar with Qualys to run scans and obtain vulnerability details and reports.
• Strong networking (routing/switching, segmentation), Windows/Linux, virtualization, and cloud (Azure) awareness.
• Solid grasp of vulnerability management, threat/exploitability context, CVSS, and remediation strategy.
• ITIL change management and CAB processes; SLA/KPI governance and reporting to enterprise/government stakeholders.
• Experience leading a small delivery team across mixed onsite and remote coverage models.
• Excellent communication, leadership, mentoring, and documentation skills.

Preferred Qualifications

• Preferred the certifications in CCNP Security or CCIE Security; PCNSE (Palo Alto) or Fortinet NSE; Cisco ISE; Qualys VMDR; CISSP or CISM; ITIL.
• Leadership and ownership mindset; comfortable owning KPIs and audits for a government client; strong mentor.