Network Security Consultant

Excellent opportunity for Network Security Consultants to be part our Cybersecurity Practice.

Key Responsibilities :

Operational delivery

• Administer and maintain the assigned technology areas within the estate (firewall, load balancer, proxy, NAC, MFA — assignment may span one or more depending on account staffing needs)
• Execute changes through the formal change management process; validate and test before production implementation. Resolve incidents escalated from L1/L2 within agreed SLA targets; perform root cause analysis on recurring or complex issues
• Maintain accurate configuration, change, and troubleshooting documentation to support audit and compliance requirements Participate in the on-call rotation and respond to P1/P2 incidents outside core hours as required

Migration & transformation support

• Support active platform migrations and decommissions in progress across the account (hardware refreshes, platform replacements, cloud transitions)
• Execute build, test, and cutover activities under L3 direction; L3 owns the technical design and cutover governance
• Maintain rollback/parallel-run plans during transition periods and flag risk to the Team Lead

Continuous improvement

• Contribute to optimization initiatives (e.g., rule/policy cleanup, dependency mapping, automation of routine tasks). Feed lessons learned and recurring issues into the knowledge base and L1 runbooks

Act as final technical escalation point across all towers, not just area of primary assignment

• Own technical design and governance for platform migrations; review and approve high-risk changes Coordinate cross-practice dependencies with adjacent delivery towers where scope overlaps.

Technical grounding expected :

• Firewall administration and policy management (rule-base changes, VPN tunnel troubleshooting — site-to-site and remote access)
• Load balancer operations (virtual servers, pools, health monitors)
• Proxy/web security administration, including exposure to cloud-delivered secure web gateway/RBI models
• Network access control concepts (802.1X, endpoint profiling) — vendor flexibility expected, as the NAC platform is under active review
• Identity/MFA administration, including cloud identity platforms
• Familiarity with adjacent security tooling used for correlated incidents (SIEM/XDR, privileged access management, vulnerability management, micro-segmentation)
• ITSM discipline — accurate ticket documentation, SLA awareness, change control adherence

Explicitly required mindset

• Comfortable operating in a critical-infrastructure/utility environment with attendant compliance sensitivity
• Willing and able to work across multiple platforms rather than defend a single-vendor specialism — several core platforms are mid-migration or mid-decision
• Available for the 16×5 shift/on-call model, including rotational off-hours coverage for P1/P2

Certifications

• Vendor firewall/network security associate-level certification (e.g., NSE 4, CCNA/CCNP Security)
• Load balancer or proxy vendor certification where applicable to primary assignment
• ITIL Foundation