ICT Engineer - Firewall

Job Details

• Permanent, Full-time role (37 hours per week).
• 28 days' annual leave (additional to Bank Holidays).
• Flexible and hybrid working available.
• This role requires regular attendance at Council Offices, so a full UK driving licence is essential.

Somerset Council is looking for an ICT Engineer ‑ Firewall to protect and support the secure, reliable digital services that keep the organisation and local communities connected. The role offers a unique opportunity for someone with a strong foundation in networking to specialise in network security and firewall technologies. You will work across a diverse technology estate spanning on‑prem and cloud environments, supporting critical systems and contributing to Somerset Council's ongoing digital transformation.

With responsibility for systems used by thousands of staff, your work will have a direct impact. The role offers a collaborative environment, structured development opportunities, and a clear career path in network security.

• Monitor firewall, VPN, and security platforms, identifying and escalating issues where required.
• Support day‑to‑day firewall operations including policy updates, NAT configuration, and system health checks.
• Assist with troubleshooting network security and connectivity issues.
• Perform initial diagnostics across firewalls and related network components.

• Support planned changes including firmware upgrades, ruleset optimisation, and migration activities.
• Assist with firewall builds, interface configuration, and policy deployment.
• Contribute to technical documentation, configuration records, and network diagrams.

• Follow governance processes including change control and security standards.
• Maintain accurate records of firewall rules, VPNs and configurations.
• Support audit and compliance activities by providing logs and technical evidence.

• Work alongside senior engineers to develop knowledge in firewall technologies and security best practice.
• Participate in training, shadowing, and knowledge‑sharing sessions.
• Identify opportunities to improve processes, reduce complexity and enhance service reliability.
• Maintain accurate records in IT service management systems.
• Collaborate with internal teams and external suppliers to support service delivery and ongoing improvements.

• Good understanding of networking fundamentals (IP addressing, routing, switching, VLANs, DNS, DHCP).
• Basic knowledge of firewall concepts (security policies, NAT, VPNs).
• Experience troubleshooting IT or network‑related issues.
• Strong problem‑solving and analytical skills.
• Willingness and enthusiasm to develop a career in network security.
• Good communication and documentation skills.
• Ability to work independently and as part of a team.

• Exposure to enterprise firewall platforms (e.g. Fortinet, Cisco, Palo Alto, Check Point).
• Familiarity with network or security monitoring tools.
• Understanding of cybersecurity standards (e.g. Cyber Essentials+, ISO 27001, NCSC guidance).
• Basic knowledge of cloud networking (Azure/AWS).
• Relevant certifications (e.g. Network+, Security+, CCNA, Fortinet NSE).
• Awareness of ITIL or service management practices.
• Experience working in a public sector or regulated environment.