Senior Systems Engineer - Networks

This job has now expired please search on the home page to find live IT Jobs.

Main Responsibilities

The Role - Senior Systems Engineer II - Network Security

Whilst specific responsibilities will be dependent upon the changing needs of the Tesco business, the following provides an overview of the role's key responsibilities and measures:

* Architect, Design and Deliver solutions using existing Infrastructure components. Where new infrastructure technologies are being introduced, implement them and establish best practice for their adoption. Resolve incidents that have not been seen before and initiate change to ensure that issues can be easily dealt with in future.

* Contribute to the Technology Roadmap for Tesco Technology Data Centres

* Evaluate new tools and techniques being able to understand their value and impact.

* Understand current application development techniques (12 factor app) and their implications to infrastructure

* Lead group design discussions on my area of expertise and be able to present with authority to a variety of audiences.

* Collaborate with Software Engineers to understand their requirements and assist them consuming Infrastructure in the most seamless way possible.

* Coach and mentor system engineers across Technology who are at a more junior level. Ensure that my own team's designs are of a high quality and understand the impacts to any other areas of infrastructure.

* Keep my technical skills up to date and keep track of new technologies, understanding how they might benefit the Technology team and wider Tesco.

* Introduce automation to all aspects of my day to day work.

This role will best suit an individual who enjoys working as part of a team, is well organised, pragmatic and a lateral thinker with an inquisitive mind who is motivated to make change for the better and, most importantly, puts our customers first.

Ideal Candidate

Skills / Experience Required:

* Experience designing and deploying solutions for large, complex global organisations

* Analytical and structured approach to design, process and advanced trouble-shooting

* Understand Tesco Technology and business strategies and convert into technology roadmaps and innovative solutions that best achieve these goals

* Ability to produce and maintain high quality HLD/LLD and Standards documentation

* Well organised self-starter who takes personal ownership and accountability at required levels of the work stream and project life cycles; willing to go the extra mile at every opportunity

* Builds and maintains positive relationships within and across teams

* Provides technical leadership within teams and mentoring for individuals

* Communicates effectively, able to deliver and present both written and verbal, designs, strategies and concepts clearly and affectively to Senior & Jnr staff alike

* Take ownership, to keep up-to-date and embrace the latest industry technologies and associated supplier solutions like SDN and SDWAN

Required Technology Skills:

* Deep technical knowledge of Firewalls Platforms and Technologies, including build and configuration of some of the following Checkpoint, Cisco ASA (and latterly FirePower), Palo Alto and Fortinet along with associated Management Systems and Firewall rule analysis tools eg Skybox, Tufin

* Advanced levels of VPN experience along with associated technologies and protocols eg IPSec, Public/Private Key Encryption, TLS/SSL, digital cert techniques like ISA/KMP GRE and DMVPN

* Excellent technical knowledge of OSI network topologies, troubleshooting and design eg Routing Protocols (BGP, OSPF, iGRP), DNS, DHCP, IP Address Management and TCP/UDP Port RFC & IEEE 802-based standards.

* High levels of experience of Threat prevention and detection techniques and associated technologies like IPS, IDS, APT/SEIM, Secure Proxy.

* High levels of knowledge of remote access and two factor authentication technologies and AAA solutions, eg RSA, Juniper/Pulse Cisco ACS, Radius

* High levels of Load balancing & Global/DNS balancing technologies and techniques eg F5 hardware and/or software appliances, Cisco ACE or Citrix Netscaler

* Good understanding of Internet/Web Technologies both hardware and cloud based, like CDN, Proxy/Caching, SSL Offloading/Interception, URL forwarding/re-direction from suppliers like Akamai, Bluecoat, Zscaler,

* Good understanding of browser-based technologies and protocols like HTML, HTTP/HTTPS and XML

* Good understanding of Network Management technologies and protocols like SNMP, Netflow, IPSLA, along with practical experience of associated Network Management & Alerting Tools

Desired Technical Skills

* CCNP levels of practical experience in designing/building, operating large-scale, Multilayer Switching and Routing using current CISCO equipment and IOS in a WAN and LAN environment using technologies like Multicast, Port Channelling, EIGRP, CDP, GLBP, VRF, QoS

* Cisco/Arista switches deployed in Spine/Leaf topology

* Associated SDN/automation technologies/configuration tools like GIT, Chef, Anisble or Puppet, preferably in a DevOps environment

* Experience of Wide Area Networking technologies and protocols, such as MPLS, WAN Optimisation (Riverbed Steelhead or Cisco WAS), CoS, DWDM

* Latest 802.11-based WiFi standards and technologies with practical design and installation of provider solutions and tools eg Cisco, Aruba or Meraki and all associated

* Scripting knowledge (eg Python, Unix/Linux or PowerShell & Batch)

* Familiarity with VMware NSX and wider VMware software stack (vCentre, vRealize)

To find out more information and to apply, please click the APPLY button.