The Network Engineer supports the delivery, stability, and continuous improvement of the organisation’s global network across 20+ countries and 120+ sites. Reporting to the Network Service Owner, the role is responsible for engineering, operating, and enhancing a multi-vendor environment including Fortinet and Cisco firewalls, Cisco Meraki MX security appliances, and Meraki wireless (APs) platforms.
The Network Engineer works as part of the network team to ensure secure and resilient connectivity using direct internet access (DIA) circuits and local ISP services, with accountability for effective ISP relationship management to optimise routing, control cost, and improve resilience. The role partners closely with Security Operations and Cyber Security teams to maintain governance for firewall policy, change control, and security assurance.
This position requires strong hands-on technical capability, disciplined operational practice, and the ability to work across time zones with internal stakeholders, third parties, and managed service providers.
The Network Engineer works as part of the network team to ensure secure and resilient connectivity using direct internet access (DIA) circuits and local ISP services, with accountability for effective ISP relationship management to optimise routing, control cost, and improve resilience. The role partners closely with Security Operations and Cyber Security teams to maintain governance for firewall policy, change control, and security assurance.
This position requires strong hands-on technical capability, disciplined operational practice, and the ability to work across time zones with internal stakeholders, third parties, and managed service providers.
Responsibilities & Duties*
- Operate, maintain, and enhance global LAN/WAN/WLAN services across 20+ countries and 120+ sites, ensuring availability, performance, and resilience.
- Administer and support perimeter and site security devices including Fortinet and Cisco firewalls, and Cisco Meraki MX appliances, in line with agreed standards and governance.
- Manage and support Meraki wireless networks (APs), including configuration templates, RF best practices, firmware strategy, monitoring, and troubleshooting.
- Provide technical ownership for DIA circuits and local ISP connectivity: ordering/ceasing, incident escalation, performance investigation, and proactive resilience improvements.
- Work with ISPs and carriers to validate routing (e.g., BGP where applicable), optimise path selection, and ensure best routing cost and service resilience.
- Participate in incident response and problem management: triage, troubleshooting, root cause analysis, post-incident reviews, and implementation of corrective actions.
- Plan and implement network changes in line with change management processes, including risk assessment, implementation plans, back-out plans, and communications.
- Partner with Security Operations and Cyber Security teams on firewall governance, including rule base management, policy review, access control, logging requirements, and vulnerability remediation.
- Support audits and compliance activities by providing evidence, maintaining accurate documentation, and ensuring controls are implemented and operating effectively.
- Maintain network documentation (diagrams, IP plans, circuit inventory, standards) and contribute to continual service improvement and automation where appropriate.
Education
- Bachelor’s degree in IT, Computer Science, or a related field, or equivalent practical experience.
Experience
- 3–7+ years’ experience in network engineering / network operations within a multi-site enterprise environment.
- Hands-on experience with enterprise platforms (Fortinet, Cisco, Juniper or Palo Alto).
- Experience troubleshooting ISP circuit issues and coordinating resolution with carriers/ISPs.
- Working knowledge of ITIL-aligned processes (Incident, Problem, Change) and experience supporting services across multiple time zones.
Knowledge, Skill, ability
- Strong understanding of core networking: TCP/IP, VLANs, routing, switching, NAT, VPNs, DNS, DHCP, QoS, and troubleshooting methodologies.
- Hands-on capability with Fortinet and Cisco firewall administration, including policy, objects, NAT, VPN, and logging/monitoring integration.
- Strong experience administering and troubleshooting Cisco Meraki (MX and APs) via Dashboard.
- Understanding of DIA connectivity and carrier services; ability to manage ISP escalations and work to restore service quickly.
- Knowledge of routing and internet path considerations (including BGP basics where applicable) to support resilient, cost-effective routing.
- Working knowledge of security principles: segmentation, least privilege, secure configuration, vulnerability management, and audit/compliance expectations.
- Ability to work effectively with Security Operations and Cyber Security teams to follow governance, produce evidence, and maintain secure firewall operations.
- Strong documentation skills (diagrams, standards, change records) and clear communication with technical and non-technical stakeholders.
Essential requirement (non-negotiable) *
- Proven network engineering experience in a multi-site environment, including hands-on troubleshooting and delivery of changes.
- Strong operational knowledge of Cisco Meraki (MX and APs) including configuration, monitoring, and fault isolation.
- Hands-on experience administering enterprise firewalls (Fortinet and/or Cisco), including policy changes performed under governance.
- Experience managing DIA circuits and working with local ISPs/carriers to resolve incidents and improve resilience.
- Good understanding of routing, NAT, VPN technologies, and (where required) BGP fundamentals.
- Ability to work closely with Security Operations / Cyber Security to implement controls, support audits, and maintain secure configurations.
- Strong written and verbal communication skills, with the ability to produce clear documentation and communicate risk/impact during incidents and changes.
Essential Certifications
- Cisco CCNA (or equivalent routing/switching capability).
- Fortinet NSE 4 / Fortinet FCP (or equivalent hands-on Fortinet firewall administration).
Desirable Certifications
- Cisco CCNP (Enterprise or Security).
- ITIL 4 Foundation.
- Security certification (e.g., Security+), and/or vendor firewall specialisms.