L3 Network & Firewall Engineer (Ref 26502)

Your tasks

• Designs, administers and supports AWS VPCs, subnets, routing and Transit Gateway connectivity.

• Configures and troubleshoots VPN connectivity and related network-routing issues.

• Reviews and supports Security Groups and NACLs in accordance with approved security and connectivity requirements.

• Administers and troubleshoots AWS Network Firewall, WAF and Palo Alto firewall technologies.

• Supports ALB, NLB and GWLB services and investigates availability, routing and traffic-flow issues.

• Administers and troubleshoots Route 53 services and associated name-resolution issues.

• Supports and troubleshoots Squid services within the supported network environment.

• Performs L3 troubleshooting across network, firewall, load-balancing and name-resolution layers.

• Reviews security policies and firewall rules for correctness, risk and operational impact and implements approved changes.

• Analyses network behaviour and recommends or implements approved optimisation actions.

• Leads root-cause analysis for recurring or high-impact network and firewall incidents.

• Plans and executes complex changes with clear risk analysis, validation and backout plans.

• Provides technical guidance and escalation support to L1 and L2 engineers and coordinates with vendors or other resolver groups.

• Maintains network diagrams, operating procedures, rule documentation and troubleshooting knowledge.

• Performs any other related task as required.

Requirements

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).

• 6+ years of overall relevant experience.

• 5+ years of experience in Network & Security, including AWS networking/firewall technologies.

• Hands-on design and support experience with VPC, subnets, routing, TGW, VPN, Security Groups, NACLs, AWS Network Firewall, WAF, ALB/NLB/GWLB, Route 53 and Palo Alto.

• Experience in L3 troubleshooting, security policy/rule review, network optimisation and Squid.

• Certifications relevant to the services provided carry additional weightage on a candidate’s qualification for the role.

Required certification(s): AWS Certified Advanced Networking - Specialty.

Good-to-have certification(s)

• Palo Alto PCNSE.

• CCNP Enterprise or CCNP Security.

• AWS Certified Security - Specialty.

• Relevant Squid experience or certification, where available.

Other

Licence no: 12C6060