About the job

Job summary

Ofwat (The Water Services Regulation Authority) is a non-ministerial government department. We regulate the water sector in England and Wales. 

We are forward-thinking, creative, innovative and ambitious. We actively encourage autonomy, collaboration and innovation and there’s a real adult culture fostered by trust, flexibility and respect. 

Ofwat were awarded 'Smarter Working Maturity' recognition for the way we have embraced new and modern ways of working, reflecting the spaces we provide, technology we have deployed and the culture and leadership we have embedded to empower choice and flexibility for our people.

Please read the attached "Candidate Information Pack" to find more about why you should join Ofwat.

Job description

The Role

We are seeking a talented Network Security Operations Engineer to join the recently expanded Ofwat Security team. You will be responsible for designing, implementing, and maintaining the security infrastructure to protect our network and systems from cyber threats and to ensure organisational productivity. You will also work closely with cross-functional teams to monitor network traffic, analyse security incidents, and respond to security events. Your expertise in network security operations will be instrumental in ensuring the confidentiality, integrity, and availability of our organisation's data and assets.

Key deliverables

In this role you will:

• Design, implement, and maintain the network infrastructure, including firewalls, intrusion detection/prevention systems, VPNs, and other security appliances, particularly Palo Alto and Microsoft technology.
• Monitor network traffic and logs to detect and respond to incidents in a timely manner.
• Investigate security incidents, analyse attack vectors, and recommend appropriate remediation measures to prevent future incidents.
• Coordinate with the IT Operations and Security teams to ensure a proactive and reactive response to network security risks and incidents.
• Collaborate with the IT team to ensure that network security measures are aligned with overall IT infrastructure and business objectives.
• Stay up to date with the latest network security threats, trends, and technologies, and proactively implement measures to protect against emerging threats.
• Participate in the development and delivery of security awareness and training programs for employees to promote a culture of security.
• Perform fundamental support for the existing network infrastructure.
• Problem solving and troubleshooting network and network security related issues across the Ofwat infrastructure.
• Implementing change, in line with the Ofwat IT Change Management process.
• Manage the corporate Wi-Fi, ClearPass Wi-Fi controller and access points.
• Network configuration in Azure Cloud.
• Work with vendors and suppliers to provide ongoing maintenance and support for networking infrastructure.
• Ability to troubleshoot complex, technical, multi-site and multi-disciplinary problems and incidents. 

Person specification

Essential Experience, Skills and Knowledge 

• Proven experience designing, implementing, and maintaining network infrastructure, including firewalls, intrusion detection/prevention systems, VPNs, and other security appliances [Lead Criterion].  
• Proficiency with next generation firewall technology, for example, Palo Alto. 
• Experience configuring network solutions, for example, switching, routing, subnetting. 
• Experience monitoring network traffic and logs to detect and respond to potential security incidents in a timely manner. 
• Proven experience in responding to security and network events to ensure the security and performance of organisation's networks and associated systems. 
• Good understanding of network and system architecture, including cloud environments, particularly Microsoft Azure. 
• Strong communication and interpersonal skills to collaborate effectively across teams.  

Attributes

• Builds Trust
• Adaptable Thinker

You can read more about Attributes in Ofwat’s Framework for Success

Benefits

• A generous Civil Service pension with an average employer contribution of 27% (£10,300 at the bottom of the band and £15,240 at the top)
• 27.5 days leave (25 days annual leave + 2.5 days privilege leave) increasing with each year of service (to max. 32.5 days), plus bank holidays
• Access to exclusive discounts on a range of goods and services such as retail outlets, theatre tickets, holidays, insurance and gym membership
• Flexible working arrangements
• Fees paid for membership of relevant professional bodies
• Up to 3 volunteering days per year
• Generous shared parental leave and pay
• Cycle-to-work scheme
• Season ticket loan for travel between home and office
• Regular professional development
• Health and well-being initiatives

Things you need to know

Selection process details

How to apply

Applicants should apply through the Civil Service Jobs website. You will be asked to create an account and complete an application form. Please contact us at recruitment@ofwat.gov.uk if you are unable to make an electronic application. 

Selection timetable

• Closing date: 21.01.24
• Sifting: WC 22.01.24
• Interview date(s): WC 29.01.24

Assessment process

Sift Stage

At sift stage we will assess your application against following essential skills, experience and knowledge taken from the professional requirements table above. Please ensure that you address these points and clearly highlight all relevant experience in your application:

• Proven experience designing, implementing, and maintaining network infrastructure, including firewalls, intrusion detection/prevention systems, VPNs, and other security appliances [Lead Criterion].  
• Proficiency with next generation firewall technology, for example, Palo Alto. 
• Experience monitoring network traffic and logs to detect and respond to potential security incidents in a timely manner. 
• Experience configuring network solutions, for example, switching, routing, subnetting. 

In the event of receiving a large number of applications, a pre-sift may take place on just the lead criterion (highlighted above).  

Interview Stage

The interview stage will test attributes as well as skills, experience and knowledge listed in the professional requirements table above. You can read more about attributes in our framework for success here.

As part of the interview process, we may require a short technical exercise or presentation. Further details will be provided to shortlisted candidates upon invitation to interview.  

Please note that the interviews will be conducted via video conferencing software (Microsoft Teams).

It may be necessary for a second stage interview, which will be communicated to the successful candidates, if required.

If you have any queries about any aspect of this role, selection process, or you require any reasonable adjustments please email recruitment@ofwat.gov.uk.   

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window). People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window). The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.