What You'll Be Doing: Designing and deploying Sophos XGS firewall and SD-WAN solutions, including VPN, IPS, web filtering, application control and TLS inspection Configuring SD-WAN profiles, SLA policies and traffic steering across DIA, MPLS and LTE transports Deploying and managing Sophos Endpoint protection, threat protection policies and device control across customer estates Performing XDR alert triage, threat hunting and investigation, and supporting MDR service delivery Deploying and managing Sophos Email Security, including Mailflow, SPF/DKIM/DMARC and DLP Managing Central Device Encryption policies, recovery key escrow and compliance reporting Supporting customer migrations from incumbent security platforms, including phased cutover planning Responding to customer security incidents, identification, containment and mitigation Producing security posture and compliance reporting aligned to POPIA, the Cybercrimes Act and ISO 27001 Maintaining the RightFax hosted service platform Producing build documentation, network diagrams and customer handover packs Providing remote enablement and training to customer IT teams Who You Are: Minimum 2 years' hands-on experience in network or information security, including firewall administration Strong grounding in network protocols, routing and switching Experience configuring enterprise firewalls (Sophos, Fortinet, Palo Alto, Cisco or equivalent) Working knowledge of EDR/XDR alert triage, email security and Microsoft 365/Entra ID Methodical troubleshooter with the discipline to verify findings before reporting them Able to explain technical concepts clearly to technical and non-technical audiences Comfortable managing concurrent deployments and shifting priorities Available for after-hours change windows and standby rotation Valid driver's license and own transport Certifications The following are required within 6 months of appointment, fully funded by Vox: CompTIA Network+, CompTIA Security+, AZ-900, and Sophos Certified Engineer for Firewall, Endpoint and Email. Sophos Architect certification forms the expected development path. SC-200, CySA+ or ISO 27001 qualifications are advantageous.