L3 Network & Firewall Engineer

Responsibilities:

- Designs, administers and supports AWS VPCs, subnets, routing and Transit Gateway connectivity.

- Configures and troubleshoots VPN connectivity and related network-routing issues.

- Reviews and supports Security Groups and NACLs in accordance with approved security and connectivity requirements.

- Administers and troubleshoots AWS Network Firewall, WAF and Palo Alto firewall technologies.

- Supports ALB, NLB and GWLB services and investigates availability, routing and traffic-flow issues.

- Administers and troubleshoots Route 53 services and associated name-resolution issues.

- Supports and troubleshoots Squid services within the supported network environment.

- Performs L3 troubleshooting across network, firewall, load-balancing and name-resolution layers.

- Reviews security policies and firewall rules for correctness, risk and operational impact and implements approved changes.

- Analyses network behaviour and recommends or implements approved optimisation actions.

- Leads root-cause analysis for recurring or high-impact network and firewall incidents.

- Plans and executes complex changes with clear risk analysis, validation and backout plans.

- Provides technical guidance and escalation support to L1 and L2 engineers and coordinates with vendors or other resolver groups.

- Maintains network diagrams, operating procedures, rule documentation and troubleshooting knowledge.

- Performs any other related task as required.

Requirements:

- Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).

- 6+ years of overall relevant experience.

- 5+ years of experience in Network & Security, including AWS networking/firewall technologies.

- Hands-on design and support experience with VPC, subnets, routing, TGW, VPN, Security Groups, NACLs, AWS Network Firewall, WAF, ALB/NLB/GWLB, Route 53 and Palo Alto.

- Experience in L3 troubleshooting, security policy/rule review, network optimisation and Squid.

- Certifications relevant to the services provided carry additional weightage on a candidate's qualification for the role.

Required certification(s): AWS Certified Advanced Networking - Specialty.

Good-to-have certification(s):

- Palo Alto PCNSE.

- CCNP Enterprise or CCNP Security.

- AWS Certified Security - Specialty.

- Relevant Squid experience or certification, where available.

Licence no: 12C6060