Experis
Bristol, Gloucestershire
This senior role is responsible for leading the end-to-end design and delivery of the migration of existing FortiGate virtual firewalls to Azure Firewall across multiple global Azure regions. The Senior Azure Consultant acts as technical design authority, owning the target-state architecture, security and routing patterns, policy governance model, and migration approach. The role will lead discovery, rule and routing translation, Infrastructure-as-Code delivery, cutover/rollback execution, and operational handover ensuring alignment with security governance, SOC/logging requirements, and dependent services such as Azure Virtual WAN, ExpressRoute, Zscaler, Azure Front Door, and Application Gateway. Key responsibilities: Own technical discovery and solution definition: inventory current FortiGate policies, NAT, routing (UDRs/BGP), traffic flows and dependencies per region; drive requirements workshops and obtain design sign-off. Act as design authority for the target Azure Firewall architecture using Azure Virtual WAN hub/spoke (regional hubs), including cross-region inspection patterns and north-south/east-west segmentation. Define and implement a global base firewall policy and regional child policies, including governance model, recertification approach, and rule lifecycle. Lead translation and rationalisation of FortiGate rules (network, application, DNAT/SNAT, proxy requirements) into Azure Firewall Policy, managing feature gaps (e.g., TLS inspection, threat profiles) through agreed compensating controls. Own routing design and change execution (UDRs, vWAN routing, BGP/ExpressRoute considerations) to steer traffic through regional firewalls with minimal disruption. Lead public IP planning, SNAT port capacity analysis, and SKU sizing (Standard vs Premium) based on throughput, connection counts, and inspection requirements. Define logging, monitoring, and SOC integration with Log Analytics and Microsoft Sentinel, including retention, alerting, and operational dashboards aligned to incident response requirements. Lead integration design and validation with Zscaler (e.g., cloud connectors), Azure Front Door, and Application Gateway, including defined bypass vs inspection flows. Deliver and govern Infrastructure-as-Code (Terraform preferred): reusable modules, environment promotion, and Git-based change control; ensure changes are auditable and repeatable across regions. Develop and drive the migration strategy and runbooks per region, including sequencing, maintenance windows, validation plans, and clearly defined success/fail and rollback criteria. Lead migration execution and hypercare, coordinating application testing/validation and troubleshooting across teams and time zones. Mentor engineers and lead knowledge transfer; produce high-quality documentation (architecture, policy model, operations procedures) and support the transition to BAU operations. Design target Azure Firewall architecture using Azure Virtual WAN hub/spoke (regional hubs), including cross-region inspection patterns and north-south/east-west segmentation. Define and implement a global base firewall policy and regional child policies, including governance model and rule lifecycle. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
This senior role is responsible for leading the end-to-end design and delivery of the migration of existing FortiGate virtual firewalls to Azure Firewall across multiple global Azure regions. The Senior Azure Consultant acts as technical design authority, owning the target-state architecture, security and routing patterns, policy governance model, and migration approach. The role will lead discovery, rule and routing translation, Infrastructure-as-Code delivery, cutover/rollback execution, and operational handover ensuring alignment with security governance, SOC/logging requirements, and dependent services such as Azure Virtual WAN, ExpressRoute, Zscaler, Azure Front Door, and Application Gateway. Key responsibilities: Own technical discovery and solution definition: inventory current FortiGate policies, NAT, routing (UDRs/BGP), traffic flows and dependencies per region; drive requirements workshops and obtain design sign-off. Act as design authority for the target Azure Firewall architecture using Azure Virtual WAN hub/spoke (regional hubs), including cross-region inspection patterns and north-south/east-west segmentation. Define and implement a global base firewall policy and regional child policies, including governance model, recertification approach, and rule lifecycle. Lead translation and rationalisation of FortiGate rules (network, application, DNAT/SNAT, proxy requirements) into Azure Firewall Policy, managing feature gaps (e.g., TLS inspection, threat profiles) through agreed compensating controls. Own routing design and change execution (UDRs, vWAN routing, BGP/ExpressRoute considerations) to steer traffic through regional firewalls with minimal disruption. Lead public IP planning, SNAT port capacity analysis, and SKU sizing (Standard vs Premium) based on throughput, connection counts, and inspection requirements. Define logging, monitoring, and SOC integration with Log Analytics and Microsoft Sentinel, including retention, alerting, and operational dashboards aligned to incident response requirements. Lead integration design and validation with Zscaler (e.g., cloud connectors), Azure Front Door, and Application Gateway, including defined bypass vs inspection flows. Deliver and govern Infrastructure-as-Code (Terraform preferred): reusable modules, environment promotion, and Git-based change control; ensure changes are auditable and repeatable across regions. Develop and drive the migration strategy and runbooks per region, including sequencing, maintenance windows, validation plans, and clearly defined success/fail and rollback criteria. Lead migration execution and hypercare, coordinating application testing/validation and troubleshooting across teams and time zones. Mentor engineers and lead knowledge transfer; produce high-quality documentation (architecture, policy model, operations procedures) and support the transition to BAU operations. Design target Azure Firewall architecture using Azure Virtual WAN hub/spoke (regional hubs), including cross-region inspection patterns and north-south/east-west segmentation. Define and implement a global base firewall policy and regional child policies, including governance model and rule lifecycle. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
SmartSourcing Ltd
Milton Keynes, Buckinghamshire
DV (Developed Vetting) Security Cleared Senior Azure/Cloud Engineer/Azure Devops is required by our government client based in Milton Keynes or London (commutable from Northampton, East Midlands, Bedford, Luton, North London). Hybrid working Working in a DV Security Cleared environment. You will hold a current DV clearance or be eligible to undertake. Rate: c.£500 - 600 (umbrella company) As the Senior Cloud/Azure Engineer leads the design, deployment, and optimisation of cloud infrastructure, enabling us to deliver secure, scalable, and innovative digital services globally. This role drives cloud adoption, automation, and continuous improvement in line with the organisations digital and AI transformation strategy. Responsibilities: Architect, implement, and manage cloud platforms (primarily Azure), ensuring compliance, security, and cost-effectiveness. Automate infrastructure provisioning and configuration using Infrastructure as Code (IaC) tools. Mentor junior engineers, contribute to DevOps practices, and support incident response and service improvement initiatives. Technical Skills Azure Tenant Ansible Containerisation (Docker/Podman) Powershell Python Linux Hypervisor (Proxmox) PKI zScaler DNS IP management GitHub CI/CD pipelines SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity, we are committed to promoting equality and inclusion for all.
DV (Developed Vetting) Security Cleared Senior Azure/Cloud Engineer/Azure Devops is required by our government client based in Milton Keynes or London (commutable from Northampton, East Midlands, Bedford, Luton, North London). Hybrid working Working in a DV Security Cleared environment. You will hold a current DV clearance or be eligible to undertake. Rate: c.£500 - 600 (umbrella company) As the Senior Cloud/Azure Engineer leads the design, deployment, and optimisation of cloud infrastructure, enabling us to deliver secure, scalable, and innovative digital services globally. This role drives cloud adoption, automation, and continuous improvement in line with the organisations digital and AI transformation strategy. Responsibilities: Architect, implement, and manage cloud platforms (primarily Azure), ensuring compliance, security, and cost-effectiveness. Automate infrastructure provisioning and configuration using Infrastructure as Code (IaC) tools. Mentor junior engineers, contribute to DevOps practices, and support incident response and service improvement initiatives. Technical Skills Azure Tenant Ansible Containerisation (Docker/Podman) Powershell Python Linux Hypervisor (Proxmox) PKI zScaler DNS IP management GitHub CI/CD pipelines SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity, we are committed to promoting equality and inclusion for all.
Eteam Workforce Limited
We are a global recruitment specialist that provides support to the clients across EMEA, APAC, US and Canada. We have an excellent job opportunity for you. Title: Zscaler SME Location: Remote Duration: 28/11/2025 (possible extension) Pay rate: £532/day inside IR35 via umbrella Role Description: 1. Zscaler SME - Experience with fault finding & resolving issues 2. Cloud Security Expertise: Deep understanding of Zscaler's Zero Trust Exchange, including ZIA (Zscaler Internet Access), ZPA (Zscaler Private Access), and ZDX (Zscaler Digital Experience). Network Architecture Knowledge: Ability to design and optimize secure network architectures using Zscaler in hybrid or cloud-first environments. Policy & Access Control Design: Skilled in crafting granular security policies, segmentation strategies, and identity-based access controls. Troubleshooting & Performance Tuning: Proficient in diagnosing traffic flow issues, latency, and user experience problems across Zscaler services. Integration & Automation: Experience integrating Zscaler with SIEMs, identity providers (eg, Okta), and endpoint protection platforms using APIs and automation tools. Trusted Advisor on Zscaler configuration: Contributes to the end-to-end, configuration, and optimization of Zscaler services Security Governance: Ensures Zscaler policies align with enterprise security standards, compliance requirements, and risk frameworks. Stakeholder skills: Acts as the bridge between security teams, network engineers, and business units. If you are interested in this position and would like to learn more, please send through your CV and we will get in touch with you as soon as possible. Please note, candidates are often Shortlisted within 48 hours.
We are a global recruitment specialist that provides support to the clients across EMEA, APAC, US and Canada. We have an excellent job opportunity for you. Title: Zscaler SME Location: Remote Duration: 28/11/2025 (possible extension) Pay rate: £532/day inside IR35 via umbrella Role Description: 1. Zscaler SME - Experience with fault finding & resolving issues 2. Cloud Security Expertise: Deep understanding of Zscaler's Zero Trust Exchange, including ZIA (Zscaler Internet Access), ZPA (Zscaler Private Access), and ZDX (Zscaler Digital Experience). Network Architecture Knowledge: Ability to design and optimize secure network architectures using Zscaler in hybrid or cloud-first environments. Policy & Access Control Design: Skilled in crafting granular security policies, segmentation strategies, and identity-based access controls. Troubleshooting & Performance Tuning: Proficient in diagnosing traffic flow issues, latency, and user experience problems across Zscaler services. Integration & Automation: Experience integrating Zscaler with SIEMs, identity providers (eg, Okta), and endpoint protection platforms using APIs and automation tools. Trusted Advisor on Zscaler configuration: Contributes to the end-to-end, configuration, and optimization of Zscaler services Security Governance: Ensures Zscaler policies align with enterprise security standards, compliance requirements, and risk frameworks. Stakeholder skills: Acts as the bridge between security teams, network engineers, and business units. If you are interested in this position and would like to learn more, please send through your CV and we will get in touch with you as soon as possible. Please note, candidates are often Shortlisted within 48 hours.
