JAC Recruitment
Senior Network & Security Specialist
London
£55k – £60k/yr
Posted about 18 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Company: Retail Company
Position: Senior Network & Security Specialist
Contract: Permanent
Location: London
Salary: 55,000 – 60,000 GBP + 10% Bonus
Job responsibilities:
Network & Connectivity
- Network architecture: Own and scale EMEA network routing, switching, firewalls, VLANs, VPN, and WiFi across offices, showrooms, warehouses, and retail stores.
- Store & warehouse networking: Deploy, monitor, and optimize general store networking and cloud-managed equipment (e.g., Cisco Meraki firewalls, switches, and wireless), including firewall lifecycle planning (e.g., Meraki MX end-of-life reviews and Fortinet options).
- Secure connectivity: Manage the regional SD-WAN model (currently vendor managed) and plan our specific arrangements, including secure network bridging to 3PL/warehouse environments.
Identity, Access & Zero Trust
- Identity & access management (Okta / Entra ID): Administer identity and access across Entra ID (Azure AD) and Okta, including SSO, MFA, application integrations, and identity lifecycle, in coordination with HQ/our IAM programme.
- SASE / Netskope: Support the rollout and adoption of Netskope Private Access (SASE / zero-trust) to retire the legacy AEB-managed Cisco AnyConnect VPN for our users, working with HQ's Zero Trust and Network Infrastructure team.
- Access guardrails: Enforce network segmentation, IP whitelisting, and firewall rules to align third-party and 3PL integrations with corporate cyber-security frameworks.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Cyber-Security, Endpoint & Vulnerability Management
- Vulnerability management portfolio: Own the our vulnerability management portfolio end to end — how our security risks and vulnerabilities are identified, prioritized, remediated, and reported.
- Security tooling: Operate and act on tooling across the security estate, including CrowdStrike (endpoint detection & response), Qualys (vulnerability scanning), and BitSight (external attack surface / ESAM security ratings).
- Endpoint security & patching: Enforce endpoint protection, device compliance, encryption, and patching through Microsoft Intune / MDM and coordinated patch cycles across the fleet.
- Incident response: Act as a first responder for security events (lost/stolen devices, suspicious activity, containment) and support incident notification and contractual security requirements with vendors and 3PLs (e.g., penetration testing and incident-notification clauses).
Retail, Warehouse & Enterprise Backing
- Retail & logistics readiness: Provide network and security support for new store openings, refits, and warehouse moves — secure LAN/WiFi, VLAN segmentation, RF/RFID, and specialist hardware.
- SAP connectivity: Manage secure connectivity prerequisites for the SAP-centric strategy — RFC/print routing, secure paths, and POS-to-ERP transaction flows.
- Global alignment: Partner with global architecture units to ensure European implementations conform to global security and network design baselines.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience
- Networking: 8+ years hands-on network engineering (routing, switching, firewalls, VLANs, VPN, WiFi) across multi-site.
- Security & Endpoint: Proven cyber-security experience specialized in endpoint security, vulnerability management, and patching, with practical use of CrowdStrike, Qualys, and BitSight (ESAM).
- Identity & Access: Practical mastery of Okta and Entra ID (Azure AD) — SSO, MFA, app integrations, and identity lifecycle; exposure to Netskope / SASE and zero-trust models.
- Vulnerability management: Demonstrated ownership of a vulnerability management portfolio: scanning, risk prioritization, remediation tracking, and reporting for our security vulnerabilities.
- CISM certified or actively grooming for CISM, strong grounding in security frameworks and controls.
We regret to inform applicants that only shortlisted candidates will be notified.
Thank you for understanding.
#UN
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location