Senior Network Security Engineer

Job title:

Network Security Automation Engineer

Will the role be 100% remote, hybrid or 100% office?

Hybrid 2-3 days/week

If the role is hybrid/ office based specify location:

Manchester

Duration of assignment:

6 Month InsideIR35 contract

Role description:

.

The Network Security Automation Engineer is responsible for designing, developing, and maintaining automation solutions that improve the efficiency, consistency, and security of enterprise network security operations. The role focuses on automating firewall rule lifecycle management, policy validation, compliance reporting, security control enforcement, and operational workflows using scripting languages, APIs, and infrastructure automation tools.

Key responsibilities:

• Design and implement automation solutions for network security operations.
• Automate firewall rule lifecycle management, including rule creation, modification, review, and decommissioning.
• Develop automated policy validation and security control verification processes.
• Build and maintain compliance reporting and audit automation solutions.
• Implement API-based integrations across security and network management platforms.
• Develop scripts and workflows using PowerShell, Python, and Bash.
• Automate operational processes to improve efficiency and reduce manual effort.
• Support security control enforcement through automated governance mechanisms.
• Utilize Infrastructure as Code (IaC) and configuration management tools such as Ansible, Terraform, and Chef.
• Troubleshoot and optimize automation workflows and integrations.
• Collaborate with Network, Security, DevOps, and Infrastructure teams to implement automation initiatives.
• Maintain technical documentation, automation standards, and operational procedures.

Key skills/knowledge/experience:

Technical Skills

• Network Security Automation
• Firewall Rule Lifecycle Management
• Security Policy Validation
• Compliance Reporting Automation
• Security Control Enforcement
• API Development and Integration
• REST API Integration
• PowerShell Scripting
• Python Development
• Bash/Shell Scripting
• Workflow Automation
• Infrastructure as Code (IaC)
• Ansible
• Terraform
• Chef
• DevOps and Automation Frameworks
• Configuration Management
• Security Governance and Compliance Automation

Functional Skills

• Process Automation and Optimization
• Problem Solving and Troubleshooting
• Security Risk Reduction
• Continuous Improvement
• Technical Documentation
• Stakeholder Management
• Cross-functional Collaboration
• Analytical Thinking

Person specification:

Additional Professional Competencies

• Strong stakeholder management and relationship-building skills across technical and executive audiences.

• Ability to influence and drive security improvements across infrastructure, cloud, engineering, and operational teams.

• Strong analytical approach to risk identification, remediation, and operational optimisation.

• Excellent written and verbal communication skills with the ability to present complex technical issues in a clear and concise manner.

• Demonstrated ability to balance security, operational resilience, regulatory obligations, and business requirements.

Additional Desirable Skills & Experience

• Experience implementing enterprise firewall governance programmes using AlgoSec or equivalent policy management platforms.

• Experience with Zero Trust Network Architecture (ZTNA), SASE, and Security Service Edge (SSE) technologies.

• Experience within large-scale financial services, banking, or other highly regulated environments.

• Knowledge of regulatory frameworks including PCI-DSS, ISO27001, NIST Cyber Security Framework, CIS Controls, and relevant financial industry regulations.

• Experience supporting network security transformation, cloud migration, and hybrid networking programmes.

• Familiarity with software-defined networking (SDN), network segmentation strategies, and modern secure connectivity solutions.

Professional Certifications (Desired)

• CISSP (Certified Information Systems Security Professional)

• CCNP Security / CCIE Security

• Palo Alto PCNSE

• Check Point CCSA / CCSE

• Azure Security Engineer Associate (AZ-500)

• AWS Security Specialty

• Certified Cloud Security Professional (CCSP)

• GIAC Security Certifications (GCIA, GCIH, GMON or equivalent)