OT Network Security Engineer / Consultant

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

About the role:

As the OT Network Security Engineer / Consultant, you will play a key role in the design, implementation and delivery of secure and resilient network infrastructure across complex OT and industrial environments.

You will work across industrial networking and network security, designing and implementing secure architectures that protect connectivity between IT, OT and safety-critical environments. This will include network segmentation, industrial DMZs, next-generation firewalls, secure remote access and resilient network infrastructure.

Working closely with clients and specialists across OT, infrastructure, engineering and cyber security, you will support solutions throughout the lifecycle – from initial design and configuration through integration, testing, commissioning and production go-live.

This is an opportunity to combine hands-on network engineering with technical consultancy, helping clients strengthen the security, resilience and performance of critical operational environments.

As an OT Network Security Engineer / Consultant, you will:

• Design and implement secure OT and industrial network architectures
• Configure and manage firewalls, switches, routers and secure remote access solutions
• Design and implement network segmentation across IT, OT and safety-critical environments
• Develop industrial DMZs, security zones and conduits
• Configure VLANs, routing, access controls and network security policies
• Support firewall policy design, rule reviews and optimisation
• Implement secure connectivity for OT applications, servers, engineering workstations and industrial systems
• Support network migrations, upgrades and infrastructure refresh programmes
• Undertake network testing, validation and performance analysis
• Support FAT, SAT, commissioning and production go-live activities
• Troubleshoot complex network, connectivity and firewall issues
• Support network hardening, vulnerability remediation and security improvement activities
• Produce HLDs, LLDs, network diagrams, firewall rule sets, test plans and as-built documentation
• Work alongside OT, cyber security, infrastructure, application and engineering specialists
• Provide technical consultancy and guidance to clients on OT network security and resilience

Requirements

You’ll bring strong hands-on network engineering experience, with the technical capability to design, secure and support networks within complex environments.

• Strong hands-on experience with enterprise and/or industrial networking
• Strong knowledge of TCP/IP, VLANs, routing, switching, DNS and network services
• Experience configuring and managing next-generation firewalls
• Experience with platforms such as Palo Alto Networks, Fortinet, Cisco or Check Point
• Strong understanding of firewall policies, NAT, VPNs, IPS/IDS and application-based security controls
• Experience designing and implementing network segmentation and DMZ architectures
• Experience with Cisco switching and routing technologies
• Experience supporting secure remote access and privileged connectivity
• Experience with network monitoring, packet analysis and troubleshooting tools
• Experience with high availability, redundant networking and resilient network architectures
• Experience with network device hardening and vulnerability remediation
• Experience supporting network integration, testing, validation and acceptance activities
• Experience producing technical network and security documentation
• Strong technical troubleshooting and problem-solving skills
• Confidence working directly with clients and technical stakeholders

Experience within OT / ICS, industrial, energy, utilities or Critical National Infrastructure environments would be highly desirable, along with an understanding of industrial protocols and OT network architectures.

Knowledge of security principles and frameworks such as IEC 62443, the Purdue Model, NCSC CAF or NIST would also be advantageous, as would networking certifications such as CCNA or CCNP.

Benefits

At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success. We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life. In addition to a Competitive Salary, here's what you can expect as part of our benefits package:

• Personalised Career Development: We create a development plan customised to your goals and aspirations, with a range of learning and development opportunities within a culture that encourages growth.
• Flexible working: Flexible work arrangements to support your work-life balance. We can’t promise to always be able to meet every request, however, are keen to discuss your individual preferences to make it work where we can.
• A Fantastic Benefits Package: This includes generous annual leave allowance, enhanced family friendly benefits, pension scheme, access to private health, well-being, and insurance schemes.

At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don’t tick all the boxes but feel you have some of the relevant skills and experience we’re looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex, or sexual orientation. Your perspective and potential are important to us.

#LI-PD1