NETWORK & SECURITY ENGINEER
Summary
Designs, deploys, and operates enterprise network, security, voice, server, and cloud infrastructure for customer and internal environments at an IT services firm — owning delivery from solution design through implementation, handover, and support. Core tech: routing/switching (BGP, OSPF, MPLS), next-gen firewalls, SD-WAN, VPNs, NAC, endpoint security, and Azure hybrid-cloud connectivity.
- Proactively scopes the technical solution required to address customer requirements, assesses customers’ met and unmet needs, and recommends solutions that optimise value for both the customer and the firm.
- Oversee and execute planned enterprise network and security infrastructure maintenance activity while minimising impact to services.
- Provide technical leadership on operational and project-related work. Design and implement plans to introduce new technology into the security and enterprise networks while minimising network outages and ensuring a seamless end-user experience.
- Conduct thorough analysis of service results and respond to any escalated service-delivery issues in a timely manner.
- Design solutions and create implementation and support models for technology encompassing a specific specialisation or platform.
- Configure, install, support, and troubleshoot security and enterprise network equipment.
- Work effectively with other IS teams and outsourcing providers to ensure technology solutions are effectively managed and delivered.
- Review reports to ensure all services are completely and successfully delivered. Proactively intervene to correct problems when encountered and use metrics to improve processes.
- Assist in developing network security and enterprise network operational processes, procedures, and documentation.
- Develop and maintain strong relationships with internal and external stakeholders to ensure optimal service delivery in the customer environment.
- Establish customer environments by designing system configurations, directing system installation, and defining, documenting, and enforcing industry standards.
- Analyse existing network security and enterprise network infrastructure and recommend solutions for optimal performance of customer network and security infrastructure.
- Develop architecture plans for network security and enterprise network solutions and deployments.
- Deploy enterprise network security solutions, including multi-vendor firewalls, network access control devices, and endpoint security solutions.
- Support and maintain customer network and security infrastructure, including routers, switches, firewalls, network access control, and endpoint security solutions.
- Provide Level 2 and Level 3 escalation support for critical incidents.
- Own the end-to-end delivery of network and security solutions, including requirements validation, high-level and low-level design, implementation, testing, acceptance, handover, and post-implementation support.
- Design, configure, and support LAN, WAN, WLAN, SD-WAN, VPN, data-centre, internet edge, voice, and cloud network solutions in line with approved architecture, security standards, and customer requirements.
- Administer routers, switches, wireless controllers, firewalls, load balancers, network access control, secure remote-access platforms, and associated services.
- Develop and enforce network and security standards covering segmentation, access control, device hardening, patching, privileged access, encryption, logging, and secure configuration baselines.
- Monitor availability, capacity, latency, traffic, configuration compliance, vulnerabilities, and security events; analyse trends and implement preventive improvements.
- Lead diagnosis and resolution of complex connectivity, performance, routing, switching, wireless, security, voice, server, and cloud incidents within agreed service levels, with clear escalation and stakeholder updates.
- Plan and execute upgrades, migrations, deployments, maintenance, and changes using documented impact assessments, test plans, approvals, rollback procedures, and post-change reviews.
- Conduct vulnerability reviews and security assessments; prioritise remediation and support incident containment, investigation, recovery, root-cause analysis, and lessons learned.
- Maintain infrastructure resilience through redundancy, configuration backup, disaster-recovery readiness, failover validation, and periodic recovery testing.
- Maintain accurate network diagrams, asset and licence inventories, configurations, standards, implementation records, test results, change records, operating procedures, and knowledge articles after every deployment or change.
- Provide technical leadership and quality assurance to assigned engineers through work planning, peer review, coaching, escalation support, skills transfer, and adherence to engineering standards.
- Collaborate with project management, sales, and presales teams on discovery, solution architecture, bills of materials, effort estimation, proposals, demonstrations, and proof-of-value engagements.
- Manage technical relationships with customers, vendors, OEMs, carriers, and service providers, ensuring effective escalation, service reviews, and timely issue resolution.
- Support audits, compliance reviews, capacity planning, lifecycle management, warranty and licence tracking, technology evaluations, and continuous service improvement.
- Prepare periodic operational reports covering availability, incidents, service levels, security posture, capacity, risks, changes, vulnerabilities, and agreed improvement actions.
- Identify opportunities to automate monitoring, configuration, reporting, and routine operational tasks to improve consistency, speed, and control.
- Participate in on-call support and planned out-of-hours maintenance when required, following established escalation and communication procedures.
- Advanced knowledge of TCP/IP, IPv4/IPv6, VLANs, STP, QoS, NAT, DNS, DHCP, SNMP, AAA, network telemetry, and enterprise monitoring.
- Strong knowledge of routing and switching technologies, including OSPF, EIGRP, IS-IS, BGP, MPLS, HSRP, GLBP, VRRP, VSS, and vPC.
- Hands-on experience with next-generation firewalls, IDS/IPS, VPNs, web filtering, network access control, identity-based access, endpoint integration, and secure segmentation.
- Working knowledge of Windows and Linux administration, virtualisation, Microsoft Azure networking, hybrid-cloud connectivity, backup, and disaster recovery.
- Ability to interpret logs, packet captures, alerts, vulnerability findings, and performance data to diagnose root causes and recommend sustainable corrective actions.
- Working knowledge of IT service management, change control, incident and problem management, configuration management, and service-level reporting.
- Familiarity with infrastructure automation and scripting tools is an advantage.
- Strong analytical, troubleshooting, documentation, communication, stakeholder-management, leadership, and customer-service skills.
- Ability to manage competing priorities, work independently, lead technical engagements, and communicate complex issues clearly to technical and non-technical audiences.
Requirements
- A relevant master’s degree is an advantage.
- CCNP certification is mandatory.
- Relevant security, cloud, or vendor certifications—such as Fortinet, HPE Aruba Networking, Microsoft Azure, or equivalent—are an advantage.
- Membership of a relevant professional body is an advantage.
- Minimum of four years’ relevant experience in enterprise networking, cybersecurity, systems infrastructure, cloud connectivity, or telecommunications.
- Demonstrated experience delivering complex network or security projects from design through handover and support.
- Experience supporting business-critical environments and resolving high-severity incidents.
- Experience coordinating engineers, vendors, and customer stakeholders is preferred.
- Willingness to participate in on-call support, planned out-of-hours work, and travel to customer sites when required.
Benefits
We aim to offer a rewarding employee experience that reflects what today’s technology professionals value most: competitive rewards, flexibility, career growth, wellbeing, meaningful work, and a supportive culture. The final package may include the following, subject to company policy and confirmation:
Competitive compensation: A market-aligned salary, performance recognition, and any applicable bonus or incentive arrangements.
Flexible working: Hybrid or flexible working arrangements, where business and customer requirements permit.
Health and wellbeing: Medical coverage and access to wellbeing support for eligible employees and, where applicable, their dependants.
Learning and certifications: Access to technical training, mentoring, learning resources, and support for relevant professional certifications.
Career development: Opportunities to work across multiple database platforms, cloud technologies, customer environments, and transformation programmes, with clear avenues for professional growth.
Retirement and statutory benefits: Pension and other applicable statutory benefits in line with local requirements and company policy.
Meaningful and visible work: The opportunity to design resilient data platforms, solve complex customer challenges, and influence the development of database services.
Inclusive team culture: A collaborative environment that values knowledge sharing, diverse perspectives, recognition, and employee contribution.