Firewall Engineer

Raymond James Investment Services are looking to recruit a Senior Firewall Engineer into our Secured Network Services team. Based in London, you will be responsible for managing, designing and improving our enterprise network firewall infrastructure, and you will assist network architects with design and implementation of firewall network technologies. The role also entails working on global projects across our business jurisdictions (UK, USA and Canada), with the chance to support on the standardised set up.

This role is responsible for senior level firewall engineering implementation and providing technical principles guidance to peer engineers, proactively taking technology project delivery from 0 to 100% with little to no supervision. General duties include leading buildout of firewall focused security solutions and driving innovation for implementation of new modern security technologies in the enterprise network. You will partner with management and peer engineers to drive infrastructure modernization projects to completion and provides Tier3 technical support using extensive expertise to take on work assignments the team is engaged in. This position does involve both routing and switching as well as network firewall implementation projects for both on-prem and cloud infrastructure.

This role will likely require occasionally working non-standard shifts including nights and/or weekends and/or have on-call responsibilities.

Duties and Responsibilities:

Design, improve and innovate:

• Primary focus is to implement new firewall technologies or changes to existing firewall technologies as identified by enterprise direction.
• Researches and recommends innovative technologies and approaches for enterprise infrastructure management, upgrades, or improvements.
• Utilise and integrate network components such as switches, routers, firewalls, wireless AP/Controllers, SDN fabric components, load balancers, NAC servers and cloud infrastructure network elements.
• Proactively identify and implement network improvements to assure the performance, resiliency and redundancy of the network.
• Utilise blueprints to engineer solutions and adhere to enterprise standards (engineering focused, architecture supported).
• Take disaster recovery and business continuity plan aspects into consideration for any new technology implementation or change.

Monitor, document and offer proactive support:

• Provides ad-hoc support for incidents requiring Tier 3 level resources (engineering/architecture) and knowledge.
• Use Microsoft Visio to produce and maintain documentation with regards to implementation of new systems or system changes.
• Participate in 24x7 on call rotation for SME Tier 3 support requirements as needed.
• Maintains service level agreements of departmental metrics, key performance indicators and adhering to strict project timelines.
• Maintain/Improve security posture, promptly addressing issues, vulnerabilities and security requirements according to regulatory guidelines (PCIDSS, PII, CIS, NIST).

Collaborate and coach:

• Work collaboratively across a variety of business units to implement new technologies.
• Coordinate and take lead of assigned projects in all technical and communication aspects.
• Collaborate with peer engineers towards achieving common goals in assigned projects.
• Coach peer engineers and effectively perform knowledge transfer/cross training activities.

Other:

• Make internal and external clients and their needs a primary focus of actions; develop and sustain productive client relationships.
• Work in a team environment or project room to facilitate collaboration.
• Performs other duties and responsibilities as assigned.

Required:

• relevant experience in Network or Information Security, or a combination of education, training and experience.
• experience with designing, implementing and maintaining Palo Alto Centrally managed firewall platforms:
  
  • Panorama policy management (NGFW PanOS) including Threat Prevention, UserID, Global Protect (Client VPN, LSVPN), HA setup;
  • Prisma Access (preferred - Cortex, DataLake, CloudIdentityEngine);
  • Deployment from 0 to 100% of enterprise firewall clusters.
• experience in network design, implementation and documentation of medium-large scale enterprise networks (10,000+ users).

Qualities and Attributes:

• Strong people skills and the ability to balance/prioritise between multiple tasks and projects are essential.
• Satisfactory level of technical and professional skill or knowledge in position-related areas; remains current with developments and trends in areas of expertise.
• Problem solving using effective approaches for choosing a course of action or developing appropriate solutions; recommend or take action that is consistent with available facts, constraints and probable consequences.
• Time management to prioritise and effectively get through project deadlines.
• Research, creating, writing, editing and proof-reading documentation.
• Communication, convey information and ideas through a variety of media to individuals or groups in a manner that engages the audience and helps them understand and retain the message.
• Identify and understand issues, problems and opportunities; compare data from different sources to draw conclusions.
• Develop and use collaborative relationships to facilitate the accomplishment of work goals.
• Ability and desire to effectively work as a team member in cross functional environment.
• Strong communication with technical team members and more importantly non-technical team members.