We are a trusted Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world including 14 of the 30 most innovative US companies, 80% of the largest banks in the US and India, and numerous innovators across the healthcare ecosystem.About Position and details:Location: LondonMode: HybridExperience: 6 to 15 yearsJob Type: Permanent roleA solid network/security/cloud engineer with a strong focus on cloud hosted environments within AWS and Azure as well as excellent skills in firewall deployment, routing and switching.OperationalProvide last line support for solutions delivered by the engineering function in line with existing IT service management processes. Act as an escalation point, for the managed service, for problems pertaining to network technology and with a view to re-engineering.Successfully transition the support of new network technologies to the support team. This will include preparing written documentation, such as a ‘Handover to Support’ document, and include product training, where required.Perform all changes to standards across the whole network stack, including cloud, on-premises datacenters, including internet edge and ACI Fabric, branch, WAN, and operate CSM/FMC to deploy firewall rules where required.Assist in the network audits and any security compliance reporting or adherence to security or compliance related processes.Participate in the transformation of documentation. This is to assist in building a set of ‘best practice’ documents in relation to Network Security.Engage with third parties, assisting on high impact network issues. This would entail joining a bridge and working with vendors.Engage with third party vendors, such as Cisco TAC or other.Have familiarity with Network Admission Control products such as Cisco Identity Services Engine.Solid troubleshooting skills with the ability to provide a packet capture on the FW and debugging thereafter.Solid understanding of routing and switching.Understanding of QoS.Understanding of Unified Communications.CloudTo design and implement network connectivity between on premise datacenters and the cloud and within the cloud. This will require an extensive knowledge of Direct Connect, leveraged through Equinix Fabric and familiar with AWS DX gateways, AWS Transit Gateways (TGW) and site-to-site VPN, to connect other third parties into the cloud and the on-premises networks to the cloud. A thorough understanding of VPC and VPC peering is essential.Through knowledge of products across the AWS Marketplace and familiar with setting up Cloud Services Routers (CSR’s) and firewalls from multiple vendors. These firewalls could be dual stack with separate vendors with HA being essential. This may extend to Autoscaling. Experience of AWS Firewall is preferred.Knowledge of IPS at all layers across the firewalls is required along with an understanding of FirePOWER services.Experience of implementing ExpressRoute within a hybrid Exchange environment, using a combination of on-premises servers and M365 SaaS.Network SecurityComfortable with firewall platforms such as Cisco ASA/FirePOWER, CheckPoint, multiple context firewalls from Cisco and CheckPoint and the tools used to deploy the rules such as Cisco CSM (Cisco Security Manager), Cisco FMC (FirePOWER Management Centre), Fortigate/Fortinet etc. Strong debugging skills are required with the ability to run packet captures and wireshark traces. Good working knowledge of ACL’s.Routing and SwitchingGood understanding of BGP and OSPF along with policy-based routing and prefixes lists. This routing knowledge should be across ASR/ISR and IOS-XE.A good understanding of NX-OS is required and any knowledge of ACI is preferred. Python and Postman is a bonus.Datacenter switching and routing comprises Cisco ACI Fabric with a spine and leaf topology. The engineer should be familiar with operation of ACI deployed within the core infrastructure. The datacenter also features firewalling between Tenants, such as Production, Secure Management and Dev/Test.Partners and vendors are connected via a separate VRF on the WAN and the webhosting environment features three tiered stacks (Cisco ASA, Checkpoint, Cisco ASA). Throughout this architecture, there are many DMZ’s so there should be a thorough understanding of all these engineer will also need to have a good knowledge of the tools used within the network, such as CMC for Riverbed, CSM for Cisco ASA, Voyager and Checkpoint Manager for Checkpoint, CPI for WiFi, ISE for NAC and future deployment of technology, such as TrustSec, RSA tools, SolarWinds Orion, Cisco ACS and Infoblox etc. A strong knowledge of Wireshark is also role is predominantly project focused with project design and delivery but there is also a requirement to assist the support function in situations determined by the Engineering Lead.Other duties should include authoring and/or maintaining governance documentation such as High-Level Designs and Solution Outlines whilst authoring and maintaining internal documentation, such as Low-Level Design, technical implementation and verification plans and Tech Specs. The ability to use Visio for network schematics is essential. This role will form part of Network Engineering team who are part of the wider Global Infrastructure Engineering function who are subject matter experts in fields such as Storage, Windows, VMWare, Unified Communications, Citrix, UNIX and Linux.Knowledge, skills, and abilitiesIn-depth knowledge of design, implementation, configuration and testing of the following:Routing – OSPF, BGP, knowledge of route redistribution and - MPLS, Internet, VPN, SDWAN, understanding of circuit commissioning.Datacenter – ACI spine and leaf, APIC, VxLAN and distribution switching.Encryption - IPsec VPN, MACSec, configuring site-to-site VPN on routers and firewalls.Switching and L3 - HSRP, VRRP, GBLP, NTP, STP, RSTP, QoS, CoS, SVI, VLAN’s, ACL’s.WiFi – Cisco Meraki and Cisco Wireless LAN controllers with Lightweight APs.Firewalls – Cisco ASA/FirePOWER, Conversion from ASA code to Firepower, Checkpoint, Fortigate, ACL’s, CSM/FMC.Competitive salary and benefits packageCulture focused on talent development with quarterly promotion cycles and company-sponsored higher education and certifications.Opportunity to work with cutting-edge technologies.Employee engagement initiatives such as project parties, flexible work hours, and Long Service awardsInsurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parentsLet’s unleash your full potential at Persistent - “Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”Send me alerts about jobs like this.Please enter your email address to continue setting up an email alert for similar jobs to this one. By entering your email address and clicking apply you will sign up to Jobs4 and agree to our terms and conditions .
#J-18808-Ljbffr
