Required Technical Skills:

• Expert-level in NAC platform administration and configuration (Forescout preferred)
• Strong understanding of network security principles. CISSP certification is desired but not required
• Working experience deploying and operating Identity platforms (Cisco Client preferred)
• Exposure to Microsoft Active Directory, Microsoft Entra ID, and LDAP
• Knowledge of network fundamentals (TCP/IP, VLANs, VRFs, VPN, Dynamic Routing). CCNP certification preferred
• Strong understanding of how Network and Security infrastructure operate at Layer 2, Layer 3 & Layer 4-7
• Knowledge of network authentication protocols, including EAP/802.1x, TACACS, RADIUS, and OAuth
• Experience working with Public Key Infrastructure and tools (Venafi)
• Expert-level experience working with Linux, Windows, and MacOS operating systems
• Experience with scripting languages (Bash, Python, Perl, PowerShell) and IaC tools like Ansible or Terraform
• Proficient with packet data tools like Wireshark to perform deep-level forensic analysis
• Ability to perform security analysis using SIEM and Analytics tools (Azure Sentinel, Log Analytics)
• Expert-level writing skills to create playbooks and standard operating procedures
• Experience with web APIs and data serialisation languages (JSON, YAML)
• Excellent problem-solving and troubleshooting abilities with an emphasis on security
• Strong communication skills to collaborate with technical and non-technical stakeholders
• Exposure to cloud service providers such as Azure or AWS
• Working experience with Next Generation Firewalls (Checkpoint, Palo Alto) or host-based firewalls (Illumio)
• Good understanding of DNS, DHCP, and IPAM systems
• Previous experience at a financial organisation is a plus.