NetSecOps Engineer

Net Sec Ops  Engineer required by my large client on a brand new project. Network Security Operations within a large-scale retail environment. The engineer will support and partner with the core Networks team to deliver a major Network Access Control (NAC) programme, alongside LAN migration activities across a complex, distributed estate. This role requires deep hands-on expertise in enterprise NAC, network security engineering, and operational readiness testing.

Key Responsibilities

* Lead technical delivery and operational readiness for a multi-phase NAC implementation across hundreds of retail and corporate sites.

* Collaborate closely with the Networks team to design, configure, test, and deploy NAC policies, authentication flows, segmentation models, and onboarding rules.

* Support large-scale LAN modernisation and migration activities, including site cutovers, switch refreshes, and security control uplift.

* Design, test, and validate operational processes, including access policy enforcement, device profiling, guest networks, and remediation workflows.

* Conduct end-to-end testing cycles (functional, failover, edge-case, and performance) ensuring stability and minimal business disruption.

* Create and maintain operational documentation, runbooks, topology diagrams, and troubleshooting guides.

* Support security governance, risk assessments, and operational KPIs related to network security controls.

* Act as a Net Sec Ops  SME, advising on best practices for identity-based networking and zero-trust-aligned access models.

Required Skills & Experience

* Extensive experience in Net Sec Ops , Network Engineering, or Security Engineering within large enterprise environments (retail experience highly desirable).

* Hands-on expertise with NAC platforms (Fortinet, Aruba Clear Pass, Forescout, or equivalent), including 802.1X, RADIUS, TACACS+, device profiling, posture assessment, and certificate-based authentication.

* Strong understanding of LAN/WAN networking technologies (switching, routing, VLANs, STP, DHCP, DNS, BGP/OSPF).

* Experience in large-scale LAN migration or refresh programmes.

* Proficiency in network security tooling: firewalls, segmentation, zero trust networking, identity-aware networking, microsegmentation.

* Familiarity with complex retail estates (distribution centres, stores, corporate offices) and operational constraints