Job Purpose:
Deliver advanced engineering, implementation, and continuous improvement of the enterprise network across on‑premises and cloud environments. This role shapes architectural direction, drives infrastructure modernisation, leads complex technical project delivery, and provides Tier 3 expertise for critical network and security operations.
Key Areas of Responsibility:
Design, Implementation & Innovation
- Deploy new and enhanced network and security technologies in alignment with architectural standards. Build, configure, and validate enterprise‑grade solutions across routing, switching, firewalls, wireless, SDN, load balancing, NAC, and cloud networking.
- Evaluate emerging technologies to improve performance, resilience, and redundancy. Ensure all designs incorporate enterprise engineering standards, disaster recovery requirements, and business continuity needs.
Monitoring, Documentation & Support
- Provide Tier 3 support for complex and escalated incidents.
- Maintain accurate and up‑to‑date network documentation using Microsoft Visio.
- Participate in a 24×7 on‑call rotation, delivering SME‑level support when required.
- Meet SLAs, KPIs, and project deadlines while upholding compliance and security frameworks (PCI DSS, PII, CIS, NIST).
Collaboration & Coaching
- Partner with cross‑functional teams to deliver new technologies and infrastructure improvements.
- Lead technical project workstreams, ensuring clear communication and successful delivery.
- Mentor and support peer engineers, promoting knowledge sharing and best‑practice adoption.
Qualifications & Experience:
Required
- 5+ years’ experience designing and implementing medium‑to‑large enterprise networks (10,000+ users).
- Strong Cisco enterprise background — CCNP Enterprise level required; CCIE preferred.
- Deep L2/L3 expertise: STP, VLANs, VTP, LACP, VPC, SVL, HSRP, VRRP, BGP, EIGRP, OSPF.
- 1–2 years’ experience with spine‑leaf architectures (Arista/Cisco); Arista ACE L3 certification required.
- Hands‑on experience with Cisco DNA Center, Cisco Wireless (WLC, FlexConnect, CAPWAP), and SD‑WAN (Cisco, Palo Alto ION).
Desirable
- Bachelor’s degree in Computer Science, MIS, or related field, or equivalent experience.
- Experience with Palo Alto firewalls, F5 platforms, GlobalProtect/F5 VPN, PKI, NAC (ISE/Forescout), Infoblox, and cloud network design.
- Scripting/automation skills (Python, Ansible).
- Familiarity with monitoring platforms such as SevOne, SolarWinds, DataDog, and Splunk.
Knowledge & Skills:
Technical
- Strong understanding of enterprise network engineering, security principles, high‑availability technologies, intrusion detection/prevention, SSL/TLS, VPNs, load balancing, performance optimisation, and capacity planning.
Professional / Soft Skills
- Excellent analytical, problem‑solving, and documentation skills.
- Ability to communicate effectively with both technical and non‑technical stakeholders.
- Strong organisational skills with the ability to manage multiple priorities.
- Collaborative mindset with the ability to build strong working relationships across teams.
