Network Security Engineer

Posted 5 days 10 hours ago by NineTech

Permanent
Not Specified
Other
Not Specified, United Kingdom
Job Description

Network & Security Engineer - Financial Services - £80k + Hybrid (Central London)

Permanent Hybrid (2-3 days in Central London)


Our client, a leading player in the financial services sector, is seeking a skilled Network & Security Engineer to join their growing team. This is a permanent opportunity offering up to £80,000, with hybrid working arrangements based in Central London.


Key Responsibilities

  • Design, implement, and support robust network infrastructure across multiple global sites.
  • Manage multicast routing for market data distribution across complex environments involving multiple VRFs and VLANs.
  • Configure and maintain Aruba (Access/Distribution) and Arista (Core/Low-Latency) switches.
  • Support BGP peering, route filtering, and optimisation for ultra-low-latency trading environments.
  • Operate and maintain Palo Alto firewalls, GlobalProtect VPNs, and ZScaler security platforms (ZIA/ZPA).
  • Support VMware SD-WAN (VeloCloud) deployments across branch and remote trading locations.
  • Monitor and optimise network performance (latency, throughput, availability) on critical links.
  • Assist with network automation initiatives and maintain accurate documentation.


Required Skills & Experience

  • Deep hands-on experience with multicast routing in high-throughput environments.
  • Strong knowledge of BGP, enterprise routing, and switching best practices.
  • Proficiency in managing Aruba and Arista switch infrastructure.
  • Prior experience supporting low-latency trading networks or other performance-sensitive environments.
  • Expertise in configuring and maintaining Palo Alto Networks firewalls and GlobalProtect VPN.
  • Familiarity with ZScaler ZIA/ZPA and securing global internet egress traffic.
  • Experience with VMware SD-WAN (VeloCloud) or comparable SD-WAN solutions.
  • Ability to diagnose and troubleshoot complex network issues across all layers of the OSI model.