Sekuro
Network Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
6 Month contract
ASAP Start
Remote in the UK with travel required to Poland or Madrid as required
About Sekuro
We're a founder-led global consulting company in the cybersecurity market, operating across Australia, Asia, and the UK. Our reputation is built on breaking away from traditional consulting models, embracing a direct and fresh approach that puts clients at the centre of everything we do. Our mission is simple: to be our clients' most trusted security partner by delivering impactful outcomes that build resilience, enable innovation, and improve competitiveness.
Our vision is to be the world's most trusted security partner, enabling organisations to protect today and prepare for tomorrow. We exist to secure organisations, empowering them to thrive in a digital world.
We live by our values: we are brave, we raise the bar, we tell it how it is, we own the outcome, and we care for all.
About the Role
Sekuro is looking for an experienced Firewall and Network Security Engineer for a critical data centre migration programme on behalf of one of our clients.
The role will be embedded as a genuine working member of the client's EMEA infrastructure team, reporting to the EMEA Head of Information Security. The scope covers two data centre facilities in Poland and a DR site in Madrid.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
The objective is straightforward; assess the existing firewall and routing environment, build a clean and optimised policy set from the ground up, and deliver a migration-ready configuration that enforces proper segmentation, least privilege access, and a materially reduced risk profile before migration execution begins.
What You'll Do
In this role you will perform a detailed review of all existing firewall rule sets (L3–L7) and routing configurations (BGP, OSPF, static routes), mapping traffic flows to the target three-tier architecture and validating zone placement and access policies. From there, the focus shifts to identifying and documenting redundant, obsolete, overly permissive, conflicting, and non-compliant rules, as well as validating segmentation across DMZ, Internal segments and country-specific sub-nets.
Working closely with the programme teams, you will develop rulebase optimisation recommendations and deliver a clean, portable, and auditable configuration ready for cutover.
- A comprehensive Firewall and Routing Assessment Report
- A Firewall Rule Rationalisation Matrix (retain / modify / remove)
- A gap analysis against the three-tier architecture model and internal security policies
- A proposed future-state rule design aligned with segmentation zones
- A prioritised risk assessment with remediation recommendations
- A migration-ready, optimised firewall rule set
- An executive summary for senior stakeholders
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What You'll Need
You will bring extensive hands-on experience across enterprise firewall platforms including Palo Alto Networks, Check Point, Fortinet, and Cisco ASA/Firepower, combined with strong expertise in network segmentation, L3–L7 traffic filtering, and routing protocols.
A proven track record in data centre migrations and firewall rule auditing at scale is essential, as is a solid grounding in three-tier architectures and Zero Trust principles.
Just as important as the technical ability is the capacity to communicate clearly; this role requires someone who can engage confidently with network engineers and executive stakeholders alike and produce documentation that is structured, precise, and actionable.
Experience with cloud networking (Azure/AWS), micro-segmentation, rule analysis tools such as AlgoSec, Tufin, or FireMon, and certifications including CISSP, CCSP, PCNSE, or CCNP Security would all be well regarded.
Please note: Our recruiter Tim Smith is based in Sydney, Australia and will be calling on Whatsapp from a +61 number
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location