SC Cleared Network Engineer - 6 months+ - £500-600pd Inside IR35 - Remote with occasional travel to London

Looking for an SC Cleared Network Engineer to provide engineering support. It is expected that the engineer will have both DevOps and network engineering skills.

Security Gateway FortiGate Management

• Maintain and support this component in the Connectivity account for both Non-Prod & Production environments
• Ensure this component gets rebuilt every 4 weeks by Jenkins
• Amend Configuration/Code via terraform as required on an adhoc basis:-
• Anti-virus
• IPS
• WAF
• File-Filter
• Python updates
• AWS Terraform provider Updates
• FortiFlex API changes
• Associated infrastructure; Route 53,S3,Load balancer, Lambda etc
• Certificate Deployment
• Vault secrets

Security Gateway NGINX Management

• Maintain and support this component in the Connectivity account for both Non-Prod & Production environments
• Ensure this component gets rebuilt every 4 weeks by Jenkins/packer and uses latest Amazon Linux 2023 AMI
• Amend Configuration via terraform as required on an adhoc basis in relation to below:-
• Instance type/size
• Additional TO
• Amendment to TO configuration
• Deployment of new TO client cert (yearly)
• Python updates
• AWS Terraform provider Updates
• Associated infrastructure ;route 53,load balancer, etc
• Certificate Deployment
• Vault secrets

Security Gateway Support

• Respond to Protective Monitoring Alerts
• Support A&T team when experience issues connecting to TOs will involve
• NGINX troubleshooting including but not limited to
• Reviewing Kibana Logs
• SSH to NGINX Server
• FortiGate troubleshooting including but not limited to
• Logging onto Management console
• Reviewing Protective Monitoring
• Running packet captures
• Raise FortiGate FortiFlex license renewal request with clients Licensing as required (expected to be once every 4-5 years)
• Review FortiFlex usage reports & emails
• Respond to CloudWatch alarms examples below (not exhaustive list)
• CPU
• Lambda script failures

Security Gateway Support Onboarding / Provisioning

• Add users to Security Enforcing Services AD Groups
• Add users to Security Enforcing Services AWS Console Groups

SC Cleared Network Engineer - 6 months+ - £500-600pd Inside IR35 - Remote with occasional travel to London