Lead Network Security Engineer

We are looking for an experienced Lead Network Security Engineer to provide technical leadership for network security across the Council's network infrastructure. You will lead on the design, implementation and maintenance of network security technologies, ensuring the Council's systems, services and data remain protected against emerging cyber threats. A key focus of the role will be the administration and optimisation of firewall and VPN technologies, alongside responsibility for DMZ services, load balancers, SSL certificates, DNS and related security systems. You will proactively monitor network activity, investigate and respond to security incidents, coordinate technical resources during major incidents and contribute specialist advice towards security policies, standards and future network designs. The role will also involve supporting network and infrastructure projects, providing security expertise throughout the project lifecycle and ensuring solutions are delivered in accordance with change management and governance processes. Working with colleagues, stakeholders, suppliers and partner organisations, you will communicate complex technical concepts clearly and help drive good cyber security practice across the organisation. About you Essential:

• Strong understanding of
TCP/IP, DNS, BGP, OSPF , and network protocols.
• Expertise with
firewalls, proxies, VPNs, IDS/IPS , and security tools.
• Knowledge of
Linux/UNIX and Windows OS security


• Ability to perform
packet analysis and use network sniffers.
• Familiarity with
NIST, COBIT, and security frameworks .
• Experience administering
FortiGate , Palo Alto , and Watchguard firewalls
• Experience administering Kemp
Loadmaster Load Balancers Desirable:
• Palo Alto
GlobalProtect experience highly desirable
• Experience with DNS, SSL Certificates, DHCP, Syslog, FTP/SFTP, SNMP and remote control technologies.
• Knowledge of the penetration testing process to assist in evaluating network resilience.
• Local and wide area networking experience.
• Power BI or other analytic tooling experience., Bachelor's degree in
Computer Science, Information Security, Networking, or related fields , or real world experience of at least 5 years.
• FortiNet
qualifications: Fortinet Certified Professional and above (FCP, FCSS, FCX)
• Palo Alto qualified to
Network Security Analyst or above.
• Other desired qualifications:
CISSP, CEH, GIAC, ITIL. We welcome applications from candidates who currently reside in the UK with established proof of right to work documentation, Disability Confident employer and guarantee an interview to anyone disclosing a disability whose application meets the minimum criteria for the post. Driving required You'll need to have the ability to drive and/or travel around Hertfordshire, either using your own mode of transport or a company car to travel to other locations. English Fluency The ability to converse at ease with members of the public and provide advice in accurate spoken English is essential for the post (for those whose language is a signed language the provision of a sign language interpreter who speaks English to the necessary standard of fluency will be required).

Our Network Team delivers secure, resilient and reliable network services to Hertfordshire County Council and a range of partner organisations across approximately 270 sites. The team comprises a range of specialist networking and infrastructure professionals, working together to support critical public services and ensure the Council's digital infrastructure remains secure, modern and fit for purpose. As part of Technology Services, the team works closely with cyber security specialists, suppliers, project teams and service areas across the organisation. This is an exciting opportunity to join a highly skilled team and play a key role in shaping the future of network security across a large and complex public sector environment.