Network Security Engineer- Routing & Switching | F5 | Firewall

Role & responsibilities

Network Security Engineer Routing & Switching, Load Balancing, Proxy

The Role

We're looking for a Network Security Engineer with strong Routing & Switching skills alongside Load Balancing and Proxy experience (e.g. Blue Coat, Zscaler). This is a hands-on engineering role covering project implementation, deployment, and troubleshooting.

What You'll Do

• Design, configure, and troubleshoot routing protocols (BGP, OSPF) across enterprise networks
• Configure and manage switching infrastructure to support secure, reliable connectivity
• Implement and maintain firewall policies and rules to protect network traffic (firewall skills required, not looking for Data Centre-specific technologies)
• Deploy and manage load balancers (F5 or equivalent), configuring VIPs, health monitors, and traffic distribution
• Configure and optimise proxy/secure web gateway solutions (Blue Coat, Zscaler, or similar), including policy-based access control, SSL inspection, and URL filtering
• Produce clear design documentation (HLDs/LLDs) for network and security changes
• Support project delivery from design through to implementation and go-live
• Troubleshoot routing, switching, firewall, load balancing, and proxy issues as they arise

What You'll Need

• Strong hands-on experience with routing and switching (BGP, OSPF) — CCNP or CCIE level
• Firewall configuration and troubleshooting experience
• Experience with load balancing technologies (F5 or equivalent)
• Proxy/SWG experience across a mix of platforms (Blue Coat, Zscaler, or similar)
• Proven project engineering and implementation experience, not just BAU support
• Strong troubleshooting skills across routing, switching, and security technologies
• Clear communicator, comfortable producing technical documentation and working across teams

Certifications

• CCNP or CCIE (Routing & Switching) required
• Firewall vendor certifications desirable (e.g. Fortinet NSE, Palo Alto PCNSE, Check Point CCSA/CCSE)