Senior Network Security Specialist

You will own the network security strategy from the ground up, defining policy, shaping the roadmap, and driving Zero Trust and micro‑segmentation across a complex, regulated environment. You'll work shoulder-to-shoulder with the Information Security team to translate policy into enforceable technical controls, and your designs will span on-premises data centres, cloud platforms, and containerised workloads. This is not a purely operational role — we're looking for someone who has grown from hands‑on network engineering into a governance and security‑led mindset and wants to operate at an architectural level.

• Designing and owning the end-to-end network security strategy and roadmap
• Leading the adoption of Zero Trust architecture and micro‑segmentation across traditional and containerised workloads
• Partnering closely with Information Security to define and enforce policies across all connectivity layers
• Acting as technical authority for Fortinet, Palo Alto Networks and Zscaler platforms
• Producing high‑ and low‑level designs for cloud, campus, WAN and data centre environments
• Driving governance — design reviews, standards, audit support and regulatory evidence
• Mentoring engineers and setting best practice across the network team
• Providing 3rd-line escalation support and subject‑matter expertise to senior stakeholders

• At least 10 years in regulated, mission‑critical environments — financial services background strongly preferred
• A career path from hands‑on network engineering into security governance and architecture
• Deep practical experience across Fortinet, Palo Alto Networks and Zscaler
• Proven ability to design and implement Zero Trust and network segmentation strategies
• Strong grounding in core protocols — BGP, OSPF, VLANs, VRF, VPN, VXLAN, DNS and more
• Experience securing hybrid environments including Kubernetes and Open Shift workloads
• Familiarity with automation and infrastructure‑as‑code for deploying security controls
• Relevant certifications such as PCNSE, NSE, CCNP Security or CISSP are advantageous