Ofertas › JAC Recruitment
JAC Recruitment · London, United Kingdom · £55,000 - 66,000 per year
Salary: £55,000 - 66,000 per year Requirements: 8+ years of hands-on network engineering experience across multi-site environments, including routing, switching, firewalls, VLANs, VPN and WiFi. Proven cybersecurity experience specialising in endpoint security, vulnerability management and patching, with practical experience using CrowdStrike, Qualys and BitSight (ESAM). Practical mastery of Okta and Entra ID (Azure AD), including SSO, MFA, application integrations and identity lifecycle management; exposure to Netskope, SASE and zero-trust models. Demonstrated ownership of a vulnerability management portfolio, including scanning, risk prioritisation, remediation tracking and reporting. CISM certified or actively working toward CISM certification, with a strong grounding in security frameworks and controls. Responsibilities: Own and scale our EMEA network routing, switching, firewalls, VLANs, VPN and WiFi across offices, showrooms, warehouses and retail stores. Deploy, monitor and optimise store networking and cloud-managed equipment, including Cisco Meraki firewalls, switches and wireless; plan firewall lifecycles, including Meraki MX end-of-life reviews and Fortinet options. Manage our regional SD-WAN model and plan secure network bridging to third-party logistics (3PL) and warehouse environments. Administer identity and access across Entra ID (Azure AD) and Okta, including SSO, MFA, application integrations and identity lifecycle, in coordination with HQ and our IAM programme. Support the rollout and adoption of Netskope Private Access to replace the legacy AEB-managed Cisco AnyConnect VPN, working with HQs Zero Trust and Network Infrastructure team. Enforce network segmentation, IP whitelisting and firewall rules to align third-party and 3PL integrations with corporate cybersecurity frameworks. Own our vulnerability management portfolio end to end, including identifying, prioritising, remediating and reporting security risks and vulnerabilities. Operate security tools across our security estate, including CrowdStrike, Qualys and BitSight, and act on their findings. Enforce endpoint protection, device compliance, encryption and patching through Microsoft Intune/MDM, coordinating patch cycles across our fleet. Respond to security events, including lost or stolen devices and suspicious activity; support containment, incident notifications and contractual security requirements with vendors and 3PLs. Provide network and security support for new store openin