Sophos Engineer

Purpose of the role

The Sophos Engineer is responsible for the design, implementation, administration, and ongoing optimisation of the organisation’s Sophos cybersecurity solutions. This includes Sophos Central, Endpoint Protection (with Intercept X), Next-Generation Firewalls, Email Security, and related technologies. The role plays a critical part in protecting the business against cyber threats by ensuring robust security configurations, proactive monitoring, rapid incident response, and compliance with security best practices. The successful candidate will act as the technical custodian of Sophos environments, helping to maintain a strong security posture while supporting business operations.

Key Responsibilities

• Manage and administer the Sophos Central platform and all associated components, including Endpoint Protection, Intercept X, Server Protection, Email Security, and Sophos Firewalls (XGS or equivalent).
• Monitor security alerts, investigate incidents, analyse malware infections or intrusion attempts, and execute timely remediation actions.
• Design, configure, and maintain Sophos Firewall policies, including firewall rules, VPN (site-to-site and remote access), web/application filtering, QoS, NAT, and reporting.
• Implement and enforce security policies for endpoints, servers, networks, and users across Windows, Linux, and macOS environments.
• Perform regular system updates, patching, health checks, and backups of Sophos configurations and policies.
• Generate and review security reports on threat landscape, protection status, and compliance metrics for management and stakeholders.
• Troubleshoot complex technical issues related to Sophos products and coordinate with Sophos Support or vendors when necessary.
• Ensure seamless integration of Sophos solutions with existing infrastructure such as Active Directory, Microsoft 365, SIEM tools, and other security platforms.
• Participate in vulnerability management, patch management, and incident response processes.
• Document configurations, processes, and changes; provide training and knowledge transfer to IT teams and end users where required.
• Support on-call or after-hours requirements as part of a rotational schedule (where applicable).

Qualifications

• Grade 12
• Bachelor’s degree (or equivalent) in Computer Science, Information Technology, Cybersecurity, or a related field will be advantageous
• Relevant industry certifications are highly advantageous, including:
  • Sophos Certified Engineer (Firewall or Central Endpoint)
  • Sophos Firewall Architect (preferred for senior roles)
  • CompTIA Security+, Network+, or equivalent
  • CCNA, CEH, or other cybersecurity/networking certifications
• Strong understanding of networking fundamentals (TCP/IP, DNS, DHCP,
  
  https://www.executiveplacements.com/Jobs/S/Sophos-Engineer-1282071-Job-Search-04-17-2026-09-00-15-AM.asp?sid=gumtree