Network and Security Service Delivery Engineer

About The Role

NESO seeks a visionary Network Security Service Delivery Engineer to lead the strategic design and evolution of our network security infrastructure. This role is responsible for setting the direction and defining the architectural blueprints that underpin NESO’s secure, scalable, and resilient energy system. The Network Security Engineering role bridges business objectives with technical execution, ensuring our network security aligns with NESO’s mission and supports long-term innovation and reliability.

• Define and govern the architectural framework for NESO’s network security, including firewalls, Zscaler, and emerging technologies.
• Translate business strategy into actionable technical solutions, creating clear architectural standards and roadmaps.
• Design scalable, secure network solutions that support NESO’s operational and strategic goals.
• Collaborate with cloud teams and partners to integrate security architectures across hybrid and cloud environments.
• Lead the adoption of automation and DevOps principles to enhance the efficiency, agility, and reliability of security operations.
• Mentor and guide engineering teams, providing technical direction and fostering continuous learning and professional growth.
• Serve as a technical authority, advising internal and external stakeholders on network security architecture and best practices.

The incumbent will work closely with cloud, infrastructure, and application teams to align security solutions with business needs. By driving collaboration, the role ensures seamless integration of security measures and supports NESO’s digital transformation.

This position is distinguished by its focus on high-level strategy and technical leadership, rather than day-to-day implementation. The Network Principal empowers engineering teams, elevates technical standards, and shapes NESO’s network security vision for the future.

This role can be based from Wokingham or Warwick and we continue to offer hybrid working from office and home. We are open to full time and part time applicants, as well as flexible working arrangements. The role is likely to include an element of out-of-hours on-call.

This role is designated as requiring a National Security Vetting (NSV) clearance. You will usually need to have been a resident in the UK for the last five years to apply for the required level of clearance.

Key Accountabilities

• Own the end-to-end network security architecture for NESO, ensuring robust protection across on-premises, cloud, and hybrid environments.
• Design, document, and govern secure network segmentation strategies, including Zero Trust models, next-generation firewall frameworks, and secure connectivity solutions such as Direct Connect, and Transit Gateway currently delivered by ZScaler
• Develop and maintain a comprehensive 12–24 month technology roadmap for network security, prioritizing automation, orchestration, and integration with the NESO Digital Strategic ecosystem to enhance operational efficiency and resilience.
• Define, publish, and enforce enterprise-wide network security standards, conducting regular architectural reviews to ensure alignment with business objectives, regulatory requirements, and industry best practices.
• Serve as the highest escalation point for complex network security incidents, analyzing network packet captures and logs to design and implement permanent solutions that address root causes and strengthen the overall security posture.
• Continuously research emerging network security threats, vulnerabilities, and industry trends, recommending architectural innovations to proactively address evolving risks.
• Design and review cloud security architectures, collaborating with cloud teams to ensure secure integration and governance across public, private, and hybrid cloud platforms.
• Provide technical mentorship and guidance to engineering and operations teams, promoting professional growth, knowledge sharing, and adherence to NESO’s network security vision and standards.

Applicants must have the right to work in the UK by the start of employment. Visa sponsorship may not be available for this role and will be considered in line with business requirements.

About You

• Extensive demonstrable experience in network security, with significant hands-on expertise in a dedicated Architecture or Lead role.
• Proven ability to see the "big picture" and design holistic solutions that balance security, performance, and cost. You don't just configure firewalls; you design the framework in which they operate.
• Expert-Level Technical Knowledge:
• Deep expertise in routing and switching (BGP, OSPF) and network protocols (TCP/IP, DNS, HTTP/2, TLS 1.3, IPsec, SDWAN).
• Advanced knowledge of on-premise and cloud-based firewalls (Palo Alto, Fortinet, ZScaler).
• Strong understanding of Cloud Native Networking in AWS/Azure (VPCs, PrivateLink, Security Groups, WAF).
• Network Principal level: TOGAF, SABSA, or CISSP-ISSAP.
• Vendor Professional/Expert: CCNP Security or CCIE, PCNSE (Palo Alto), NSE 7/8 (Fortinet
• Automation & Scripting: Experience with infrastructure as code (Terraform, CloudFormation) and automation using Python, Ansible, or similar to enforce security at scale.
• Exceptional ability to create clear architectural diagrams, HLD documents, LLD documents and presentations for consumption by executive leadership (CISO, CIO) and peer teams. You can explain a complex packet flow to an engineer and a business risk to a manager.
• Strong understanding of ITIL and Agile methodologies within a security context. Experience with governance frameworks like ISO 27001, NIST, or SOC2.
• Expert understanding of security monitoring, operational reporting, alerting, and security observability platforms across enterprise and cloud environments.
• Experience defining meaningful security metrics, KPIs, KRIs and executive reporting that provide visibility of security posture, service performance, compliance, risk exposure, and operational resilience.
• Ability to govern enterprise-wide reporting frameworks for:
• Firewall policy compliance, Security incidents, Threat activity, Rule recertification, Vulnerability exposure, Change compliance, Segmentation effectiveness, Regulatory compliance
  

What You'll Get

A competitive salary of £60,000 - £70,000 dependent on experience and capabilityAs well as your base salary, NESO's core benefits are the essential perks and advantages that form part of your employee package. - You will receive a bonus based on company performance- 26 days annual leave as standard - A competitive contributory pension scheme where we will double match your contribution to a maximum company contribution of 12%. - Annual Enrollment to NESO Savings Plan, when you save between £20- £500 a month from your take-home pay, we will pay a 50% matching contribution.

Benefits

NESO's flexible benefits programme provides you with more flexibility around your health, lifestyle and protection benefits, here's just a few available:

• Flexible Bank Holidays & Holiday Trading
• Additional Birthday Day Off
• Cycle to Work Scheme, Retail & Gym Discounts
• Private Medical Insurance, Critical Illness Insurance & Personal Accident Insurance

About Us

At the National Energy System Operator (NESO), we play a vital role in tackling climate change and securing Great Britain's energy future. We already operate the world's fastest decarbonising electricity system and are working towards our ambition to run it carbon-free for a short period this year - provided the market supplies electricity exclusively from renewable sources. Alongside this, we provide expert advice to government on how to deliver a clean power system by 2030.

In autumn 2024, the Electricity System Operator (ESO) transitioned to become NESO - an independent, expert public corporation with a whole-system view across electricity, gas, and hydrogen. NESO operates independently and transparently, always acting in the best interests of all energy users.

Licensed and regulated by Ofgem, we make impartial decisions that balance sustainability, affordability and security. Our organisation is fully independent from government, the regulator and all commercial interests, with a clear focus on system-wide benefit, long term thing and public value.

The time to deliver is now. Join the energy transformation and help shape the future.

Your energy. Our future. Together

National Energy System Operator (NESO) recognises the potential of bright and talented individuals, and we encourage you to join us as Great Britain’s energy system undergoes an ambitious, exciting, and vital transformation. Together with industry, we are creating a cleaner, more sustainable energy future.

More Information

This role closes at 23:59, on the day before date shown above, however we encourage candidates to submit their application as early as possible and not wait until the published closing date as this can vary.

Research shows that some people may hesitate to apply unless they meet every single requirement. At NESO, we believe potential comes in many forms and we're committed to a fair, inclusive recruitment

We're committed to building a workforce that represents the communities we serve, and a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential. If this role sparks your interest but you're not sure you tick every box, we still want to hear from you. process where everyone has the opportunity to show their talents. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds.