Network Security Engineer

About the role

We are seeking a Network Security Engineer to protect and optimise the bank’s network infrastructure. The role focuses on firewall management, threat prevention, and ensuring secure connectivity across corporate and cloud environments.

Key responsibilities

• Design, implement and maintain firewall policies, including creation, modification and troubleshooting of rule sets.
• Deploy and manage Network Access Control solutions such as Cisco ISE and Forescout to enforce security policies.
• Implement network segmentation strategies to control traffic between subnets based on granular rules.
• Administer web filtering platforms, manage URL whitelisting and configure SSL bypasses as required.
• Provide routing and switching support for LAN and data‑centre environments.
• Support remote access VPN solutions, specifically Palo Alto Prisma Access and GlobalProtect client.
• Configure and maintain secure private interconnects to public cloud platforms (AWS, Azure) and trusted partners.
• Act as an escalation point for incident response, performing advanced troubleshooting and diagnostics.
• Monitor network health proactively using Solarwinds and related tools.
• Manage public DNS zones and records, ensuring security and reliability.
• Assist with data‑centre load‑balancing configuration and optimisation.

Required profile

• Proven experience with firewall and threat‑prevention technologies.
• Hands‑on expertise with Cisco ISE, Forescout, and network segmentation concepts.
• Solid understanding of web filtering solutions and SSL inspection.
• Strong background in routing, switching and VPN technologies.
• Experience configuring secure cloud interconnects to AWS or Azure.
• Demonstrated ability to lead incident response and perform advanced network diagnostics.
• Familiarity with proactive monitoring tools such as Solarwinds.
• Knowledge of DNS management and data‑centre load‑balancing.

Required skills

• Firewall & Threat Prevention
• Firewall policy management
• Malware and ransomware protection
• Cisco ISE
• Forescout
• Network Segmentation
• Web Filtering
• Routing
• Switching
• Palo Alto Prisma Access
• GlobalProtect client
• AWS cloud connectivity
• Azure cloud connectivity
• Incident Response
• Solarwinds monitoring
• DNS Management
• Load Balancing