Network Security Engineer

Salary: £? - ? per year

Requirements:

• Strong understanding of SWG controls
• Experience with Island Enterprise Browser, extension and agent engineering
• Strong understanding of TLS interception
• Experience with Proxy and Secure Web Gateway technologies
• Experience with Zero Trust Network Access (ZTNA)
• Strong understanding of authentication methods at enterprise level
• Strong understanding of content controls in request and response mode
• Experience with network security automation using Python, PowerShell, APIs, and Terraform
• Experience with cloud security and secure connectivity
• Experience with identity integration, including Entra ID, Conditional Access, and MFA
• Hands-on experience implementing, configuring, and supporting Enterprise Browser solutions, including Island Browser or equivalent secure enterprise browser technologies
• Experience designing and implementing browser-based security controls to support Zero Trust security principles, secure remote access, data protection, and policy enforcement
• Experience configuring and managing browser security policies, including DLP, clipboard controls, file upload and download restrictions, browser isolation controls, session protection, watermarking, and secure application access controls
• Experience integrating Enterprise Browser platforms with downstream SWG, Microsoft Entra ID, MFA, Conditional Access, and SIEM platforms
• Strong understanding of browser-based security architecture, enterprise endpoint security, and secure access governance
• Experience troubleshooting browser policy enforcement, application compatibility, authentication integration, and user adoption challenges
• Knowledge of Browser Isolation, Secure Enterprise Browsing, Zero Trust Access, and Secure Workspace technologies
• Strong operational experience supporting enterprise network security environments
• Experience managing security incidents, policy changes, exceptions, and operational support within regulated organisations
• Understanding of compliance management, governance processes, audit requirements, and regulatory controls
• Experience working within ITIL-aligned Incident, Problem, Change, and Service Management frameworks
• Experience automating network security processes, including rule lifecycle management, policy validation, compliance reporting, security control enforcement, and operational workflows
• Proficiency in PowerShell, Python, Bash, and API-based integrations to support automation objectives
• Experience with automation platforms and configuration management tools such as Ansible, Terraform, Chef, or equivalent solutions

Responsibilities:

• Lead the implementation, engineering, and operational support of Island Enterprise Browser services across enterprise environments
• Develop and maintain browser security policies to protect sensitive data, secure third-party access, and support workforce mobility initiatives
• Collaborate with Security Architecture, End User Computing, Identity & Access Management, and Security Operations teams to deliver secure browser-based access solutions
• Support browser modernisation initiatives that replace traditional VPN and endpoint-centric security controls with Zero Trust access models
• Design, implement, and maintain secure enterprise network infrastructure and security controls aligned to organisational strategy and security standards
• Drive network security enhancements and modernisation initiatives within agreed budgets, timelines, and risk appetites
• Support the delivery of secure connectivity solutions across cloud, on-premises, and hybrid environments
• Collaborate with architects and engineers to develop High Level Designs and Low Level Designs into operational solutions
• Lead operational readiness and transition requirements from design/build phase to BAU
• Lead policy governance, including rule review, optimisation, recertification, and compliance management processes
• Drive continuous improvement of network security operations through automation, policy simplification, and control standardisation
• Identify opportunities to reduce operational risk through proactive firewall rule analysis, remediation, and optimisation activities
• Partner with Infrastructure, Security Architecture, Engineering, and Cyber Defence teams to deliver secure network services and strategic security initiatives
• Collaborate with leadership teams to align network security capabilities with broader technology, resilience, and cyber security strategies
• Develop and implement automated solutions for network security administration, policy management, compliance validation, and operational processes
• Drive the adoption of Infrastructure as Code, Security as Code, and automated governance controls across network security platforms
• Contribute to enterprise-wide initiatives focused on network visibility, security posture improvement, and operational efficiency
• Monitor and analyse browser security events, policy violations, and suspicious user activity to support threat detection and incident response activities
• Support investigations involving browser session activity, data protection events, and secure application access controls
• Monitor, analyse, and respond to network security incidents, vulnerabilities, and emerging threats
• Support threat detection, containment, remediation, and post-incident reviews
• Ensure network security controls remain effective, compliant, and aligned with evolving cyber threats
• Conduct security assessments, rule reviews, and network segmentation activities
• Ensure network architectures comply with security standards, secure-by-design principles, and software development lifecycle requirements
• Support the implementation of Zero Trust, defence-in-depth, and least privilege security models
• Maintain awareness of current industry threats, vulnerabilities, and security technologies

Technologies:

• API
• Ansible
• Bash
• Cloud
• Firewall
• Support
• ITIL
• Network
• PowerShell
• Python
• Security
• Terraform
• VPN
• Web

More:

We are offering a Network Security Engineer role based in Knutsford with 3 days onsite. The contract runs for 4 months and is offered at up to £490 per day on an umbrella-only basis. Clearance required: BPSS. This role focuses on designing, implementing, securing, and optimising enterprise network security services across on-premises, cloud, and hybrid environments, with a strong emphasis on automation, continuous improvement, operational excellence, and modern Zero Trust security technologies. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.

last updated 36 week of 2026