Network Engineer

Network Engineer (Hybrid)

Join a large enterprise environment as a Network Engineer focused on network design, implementation, security and modernisation. You’ll take ownership of complex infrastructure initiatives, working closely with architecture teams and senior stakeholders to deliver projects end-to-end.

This role suits a hands-on engineer comfortable managing multiple workstreams in a regulated, large-scale environment.

What You’ll Do

• Design, build and implement enterprise network and network security solutions
• Deliver infrastructure projects from concept through to production
• Engineer solutions aligned to enterprise architecture standards and blueprints
• Build and support on-prem and cloud network infrastructure
• Improve performance, resilience and scalability through technology innovation
• Design highly available and resilient architectures, including DR and BC
• Provide Tier 3 support for complex incidents and escalations
• Participate in a 24x7 on-call rota
• Maintain detailed network documentation (Visio)
• Strengthen network security in line with PCI-DSS, PII, CIS and NIST frameworks

Core Technologies

• Switches, routers, firewalls, wireless platforms
• SDN fabrics, load balancers, NAC and cloud networking

What You’ll Bring

Essential:

• 5–7+ years designing and supporting large enterprise networks (10,000+ users)
• Strong Cisco enterprise hands-on experience
• CCNP Enterprise (R&S) level knowledge
• Solid expertise in:
• Layer 2: STP, VLANs, VTP, LACP
• High availability: vPC, SVL, HSRP, VRRP
• Routing: BGP, EIGRP, OSPF
• 1–2 years designing and supporting data centre spine-leaf fabrics (Cisco / Arista)
• Arista ACE L3 certification required
• Experience with Cisco DNA Center
• SD-WAN experience (Cisco, Palo Alto ION)
• Enterprise-scale Cisco Wireless (WLC, FlexConnect, CAPWAP)

Nice to Have

• Palo Alto firewalls (Pan-OS, Threat Prevention, User-ID, GlobalProtect, Prisma Access)
• F5 BIG-IP (LTM, GTM, APM, ASM / Cloud WAF)
• Remote access VPNs
• Certificate lifecycle management (Venafi / PKI)
• NAC solutions (Cisco ISE, Forescout)
• Infoblox DNS / IPAM
• Cloud networking and security
• Automation (Python, Ansible)
• Monitoring tools: SevOne, SolarWinds, Datadog, Splunk
• Strong understanding of network security architecture, IDS/IPS, VPN and SSL