Senior Network Automation Engineer

Opticore IT is a specialist Network Engineer and Project Management consultancy offering a wide variety of opportunities to work within fast-paced, challenging environments across our client base spanning multiple sectors including Finance, Broadcast Media, Telecommunications and more.

Opticore IT are currently searching for a Senior Network Automation Engineer who is operating at strong level for both Go and Fortinet Firewall policy management. You'll join our excelling team, based in the London area and would require you to be on-site at least 1 day per week.

You will design, build and roll out the automated Firewall Rule Base Management (FWRBM) capability on the clients Global Network Architecture (GNA) platform, replacing a manual, audit flagged firewall rule review process across the Heritage Fortinet and Juniper estate and laying the technical foundation for multi-vendor firewall policy management.

What you'll be doing:

• Design the UK Cyber SIEM (Kibana) integration, candidate rule logic and rule handling automation, and take the design through review and sign off with 3rd Line IP Security Operations and DCOE

• Build the SIEM data integration in Go, pulling rule hit counts and destination bytes over a 90 day window and handling the 999 rule per query limit through pagination

• Develop the candidate rule identification engine, cross referencing SIEM data against live firewall config by VDOM/LSYS and physical firewall, and applying the action, logging, naming standard and do not delete exclusion checks

• Implement traffic quality filtering so rules with one way or unanswered traffic are flagged for manual analysis rather than deleted on hit count alone

• Automate rule handling on Fortinet and Juniper platforms: moving candidates to a Rulebase Review section, renaming to the review convention, disabling external facing rules and enforcing logging

• Produce the weekly tabular candidate report that lets an SME approve, deselect or reject individual rules

• Integrate change execution with Remedy and TOCAB so approved deletions are raised, scheduled, executed and closed out on the review tracker automatically

• Lead the pilot on a single firewall cluster, validate results against the existing manual process, then drive the phased rollout across 70+ clusters and provide hypercare

• Support roadmap work on automated decommission reporting and change control, and contribute to Heritage Three (H3) requirements and discovery for Clavister and Cisco ASA/Firepower

What you'll bring:

• Go Development for Network Automation

• Fortinet & Juniper Firewall Policy Management

• SIEM Integration (Elastic/Kibana)

• ITSM Change Integration (Remedy / ITIL Change)

• Source of Truth Integration (NetBox)

What you’ll gain:

Here at OpticoreIT we believe in investing in our team as we understand that we are only as great as our engineers, so learning and development is a big deal for us. Whether you’re going for a CCNP, CCIE, Hashicorp, Python, Cloud Technology or anything in between Opticore IT has your back with all our training, labs, courses, and shared knowledge and the most important part it’s all free! On top of that, we also give you:

• Competitive Salary & discretionary bonus

• 23 days holiday + bank holidays

• Private healthcare & dental

• Pension

• EV car, workplace nursery, tech, and cycle-to-work salary sacrifice schemes

• Team & Company Social events

• EMI share scheme

Diversity:

At Opticore IT we embrace diversity and are committed to equal opportunities. We actively recruit for an inclusive and diverse workforce and as such, want to ensure we do everything we can to support your application.

We want you to feel empowered to let us know if you require any adjustments to be made with your application or interview process so please speak to our recruitment team.