Network Security Engineer

We are searching for an experienced IT Network Engineer responsible for designing, securing, and maintaining reliable IT networks and communications across internal and external operations.

The role is offered on a hybrid basis: 3 days in the office and 2 days from home, after successful probation. Applicants should live within a commutable distance of Exeter Airport.

Our client aims to build stable, secure, and efficient IT networks and systems to support business technology use.

The key responsibilities include:

1. Designing and deploying network services aligned with design and security policies.
2. Monitoring and managing the installation and integration of network communications, including routers, switches, firewalls, DMZ, servers, telephony, and LAN/WAN services.
3. Managing IP space, VLANs, IP subnets, DNS, DHCP, VPNs, and VoIP traffic to ensure security and optimization.
4. Implementing best practices for network security.
5. Planning lifecycle renewals, 'hotswap' procedures, and emergency hardware failure protocols.
6. Providing regular service updates and monitoring service availability targets.
7. Ensuring WAN bandwidth and connectivity are sufficient, balanced, and efficient, with failover testing.
8. Researching networking developments and recommending improvements.
9. Collaborating with SOC and security teams to implement security measures.
10. Maintaining hardware asset records and supporting hardware infrastructure.
11. Ensuring data backup and integrity processes are in place.
12. Maintaining network documentation, including schematics.
13. Assisting with hardware deployment, desktop and mobile device management.
14. Managing MS Windows Active Directory, security groups, and policies.
15. Assisting with firewall and email security management.

Candidate requirements include:

• A relevant degree or professional certifications (preferred).
• Experience in secure networks within a MS Windows environment.
• Expertise in LAN/WAN/VLAN, VPN, and wireless networking, preferably with Dell switches.
• CCNA/CCNP certifications are required.
• Firewall management experience, ideally with FortiGate.
• Skills in Cat6 and fibre communication protocols, TCP/IP, DNS, DHCP, Active Directory, SSL, 2FA.
• Knowledge of Windows Server, SCCM/MECM, virtual networks (ESXi, VMware), and backup/security tools (Veaam, CrowdStrike, Cortex XDR) is advantageous.
• Experience with IP telephony and MS Office 365 suite is beneficial.
• Strong troubleshooting, communication, and user support skills.
• Flexibility for out-of-hours work if needed.
• A full, clean driving license is advantageous but not essential.

Benefits include:

• Competitive salary.
• Holiday entitlement starting at 24 days plus bank holidays, rising to 27.
• Hybrid working arrangements.
• Pension, life assurance, and ongoing training.
• Right to work in the UK required.

Note: Due to high application volume, only suitable candidates will be contacted. We affirm no discrimination under the Equality Act 2010. Bowerford Associates Ltd acts as an employment agency for this vacancy.