Network Security Engineer

Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change.

By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses.

From prototype to real-world impact - be part of a global shift by doing work that matters.

Endava is seeking an experienced Network Security Engineer to support the design, governance, and continuous improvement of enterprise network security architectures and controls across client environments.

This hands-on engineering role is responsible for defining secure network architecture patterns, security standards, and control baselines that protect enterprise networks, users, applications, and data. The role focuses on ensuring security is embedded within modern network architectures including hybrid environments, remote access platforms, cloud connectivity, and software-defined networking.

Working closely with Network Operations, Cloud Engineering, and Security Operations teams, the Network Security Engineer will ensure network security controls are designed, implemented, and governed effectively. The role also supports incident response, monitoring integration, and the continuous improvement of network protection capabilities aligned with modern threat landscapes.

Responsibilities:

• Define and maintain enterprise network security standards, policies, and reference architectures.
• Design secure-by-design network architectures including segmentation, DMZ patterns, secure remote access, and third-party connectivity models.
• Establish and maintain network security hardening baselines and configuration standards for network infrastructure.
• Govern firewall and network security control requirements including rule management standards, logging requirements, and review processes.
• Partner with network operations teams to ensure security controls are embedded into operational processes and infrastructure changes.
• Improve network visibility and monitoring by integrating network telemetry into security monitoring and detection platforms.
• Support incident response activities involving network infrastructure, providing technical guidance for containment and remediation.
• Identify and remediate network security vulnerabilities, misconfigurations, and policy exceptions based on risk and business impact.
• Maintain network security architecture documentation, including blueprints, diagrams, and configuration standards.
• Support secure connectivity requirements for third-party partners, suppliers, and cloud services.
• Contribute to network security tooling strategy and roadmap development across enterprise environments.

Experience:

• 8–10+ years of experience in network engineering or cybersecurity roles, with at least 5 years focused on network security engineering.
• Proven hands-on experience designing and securing enterprise networks using next-generation firewalls, SD-WAN technologies, and network access control platforms.
• Experience designing secure network architectures including segmentation, secure remote access, and hybrid cloud connectivity.
• Experience working with network operations teams to implement and maintain security controls in production environments.
• Experience supporting security monitoring, detection engineering, and network-related incident response investigations.
• Experience working in enterprise or managed services environments supporting large-scale network infrastructures.
• Relevant certifications such as PCNSE, CCNP Security, or equivalent network security certifications are desirable.

Technical Skills:

• Strong knowledge of enterprise network security architecture including:
  • Network segmentation and micro-segmentation
  • Secure remote access and VPN architectures
  • DMZ and perimeter security patterns
  • Zero Trust networking principles
• Hands-on experience with network security technologies such as:
  • Palo Alto Networks NGFW
  • SD-WAN platforms
  • Cisco ISE or similar NAC solutions
  • Meraki network security technologies
• Experience managing firewall policies, rule lifecycle governance, and traffic analysis.
• Understanding of network telemetry, packet inspection, and security logging for threat detection and investigation.
• Experience integrating network logs into SIEM or security monitoring platforms.
• Knowledge of hybrid and cloud networking patterns including:
  • Virtual networks and security groups
  • Transit gateways and hybrid connectivity
  • Network access control and identity-based networking
• Strong troubleshooting skills for network security issues including firewall policy analysis and network traffic investigation.
• Ability to translate security requirements into practical and scalable network security controls.

Discover some of the global benefits that empower our people to become the best version of themselves:

• Finance: Competitive salary package, share plan, company performance bonuses, value-based recognition awards, referral bonus;
• Career Development: Career coaching, global career opportunities, non-linear career paths, internal development programmes for management and technical leadership;
• Learning Opportunities: Complex projects, rotations, internal tech communities, training, certifications, coaching, online learning platforms subscriptions, pass-it-on sessions, workshops, conferences;
• Work-Life Balance: Hybrid work and flexible working hours, employee assistance programme;
• Health: Global internal wellbeing programme, access to wellbeing apps;
• Community: Global internal tech communities, hobby clubs and interest groups, inclusion and diversity programmes, events and celebrations.

At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.