Network Engineer

Charles Russell Speechlys LLP; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A law firm is seeking a Network Engineer to maintain its LAN/WAN infrastructure and manage complex network systems. Responsibilities include designing and implementing Cisco network solutions, ensuring security with Palo Alto and FortiGate firewalls, and troubleshooting network performance. The ideal candidate has over 5 years of experience, strong knowledge of network protocols, and relevant Azure and Cisco certifications. This role offers a hybrid working model, balancing in-office and remote work based on manager approval.

Qualifications

• Strong understanding of Cisco ISE and network security protocols.
• Experience in supporting network security functions.
• Strong understanding of wireless protocols and Cisco Wireless LAN configurations.

Responsibilities

• Design and manage complex network infrastructure.
• Monitor network performance and perform troubleshooting.
• Develop and enforce network security policies.

Skills

In-depth knowledge of core network fundamentals

Proven experience with Cisco products

Working knowledge of Palo Alto firewalls

5 years plus experience

HLD / LLD Documentation skills

ITIL

Knowledge of the Microsoft Azure cloud stack

Education

Relevant Azure and Cisco qualifications

Tools

Cisco Campus Networking

Cisco Nexus switches

Palo Alto Prisma Access

FortiGate Firewalls

Job description

Reporting directly to the Infrastructure Platforms Manager, the Network Engineer will be Responsible for maintaining the existing LAN/WAN infrastructure as well as working on projects to maintain our LAN/WAN and Office Moves and Changes.

Roles and Responsibilities

• Design, implement, and manage complex network infrastructure using Cisco Campus Networking 9300 series and Cisco Nexus switches.
• Configure, deploy, and maintain Palo Alto Prisma Access firewall policies to ensure secure access to critical applications and data.
• Administer and configure FortiGate Firewalls for advanced security measures and threat management.
• Monitor network performance, identify issues, and perform necessary troubleshooting to maintain optimal network health.
• Develop and enforce network security policies, procedures, and standards to protect organisational assets.
• Collaborate with IT and security teams to assess and mitigate security risks and vulnerabilities.
• Provide advanced technical support
• Escalate issues / manage changes with necessary 3rd party managed service providers.
• Stay current with industry trends and emerging technologies to ensure the network infrastructure remains robust and up-to-date.
• Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles.

Skills and experience

General Skills

• In-depth knowledge of core network fundamentals including Layer 2/3 technologies, routing protocols such as BGP and OSPF and network troubleshooting.
• Proven experience with Cisco’s range of products including Catalyst and Nexus switches.
• Working knowledge of Palo Alto firewalls, Prisma Access and SD-WAN in general will be highly desirable.
• Relevant Azure and Cisco qualifications
• 5 years plus experience
• HLD / LLD Documentation skills
• ITIL
• Knowledge of the Microsoft Azure cloud stack

Cisco ISE (Required)

• Proven experience in supporting network security functions primarily focussing on Cisco ISE.
• This role requires expertise in Cisco ISE and a strong understanding of network security protocols.
• Configure and optimise ISE policies for authentication, authorisation, and accounting (AAA).
• Monitor and troubleshoot ISE-related issues to ensure optimal performance and security.
• Collaborate with network and security teams to integrate ISE with existing infrastructure.
• Develop and maintain documentation related to ISE configurations, policies, and procedures.
• Strong understanding of network security protocols, including RADIUS, TACACS+, and 802.1X.

Cisco Wireless Controllers (Required)

• Strong understanding of wireless protocols, Cisco Wireless LAN configurations, and security principles.
• Maintaining, troubleshooting, and supporting Wireless LAN Controllers and associated Wi-Fi networks.

FortiGate (Desirable)

• Proven experience as a network engineer or support engineer with a focus on Fortinet products.
• Provide technical support and troubleshooting for Fortinet products, including FortiGate, FortiAnalyzer, FortiManager, and other related solutions.
• Assist with the configuration, deployment, and maintenance of Fortinet and Cisco devices.
• Fortinet certifications such as NSE 4, NSE 5, or higher are highly desirable.

Person specification

• A logical approach to problem-solving and demonstrating analytical capabilities
• The ability to work well under pressure
• An enthusiastic approach to work and self-learning
• Attention to detail and a focus on process
• Good communication skills, including the ability to convey information concisely to those who may have no background in technology
• Self-starter

Hybrid working - We adopt a hybrid and flexible working approach, dependent on the requirements of the role and subject to manager approval.

For a detailed specification please download the job description in the documents section of this page.