Senior Network Architecture & Design Engineer (Mid Shift, Permanent WFH)

SUMMARY

We are seeking a highly experienced Senior Network Engineer to hold design authority for our network engineering practice. This is a senior technical leadership role: you will provide strategic technical direction on our most complex network projects, own solution architecture and roadmap decisions, and lead the training and development of our L3/L4 network engineers.

You will bring everything expected of a Network Project Engineer the full range of hands-on infrastructure delivery skills at an expert level, using that depth to design, review, and mentor rather than solely to build. Alongside this technical authority, you will act as a consultant to internal and external stakeholders, contribute to bids and commercial proposals, and help shape how the team adopts new technology, including AI, across networking, security, infrastructure and managed services.

JOB RESPONSIBILITIES

• Design & Solution Architecture

  • Design, engineer, and implement complex network solutions across a variety of disciplines, security postures, access control models, and infrastructure.
  • Drive and implement network solution-based architectures that increase efficiency.
  • Apply a strong understanding of large-scale network capacity management and modelling.
  • Understand the dependencies between Network, Security, Cloud and Infrastructure, and design solutions holistically rather than within individual technology silos.
  • Produce and review solution documentation, including high-level designs, statements of work, bills of materials, assumptions, risks and technical proposals.
  • Undertake design reviews and ensure quality standards are maintained throughout project delivery.

• Strategic Direction & Roadmap

  • Provide strategic technical direction on highly complex network projects and activities, including the selection and recommendation of design approach and systems technology.
  • Research and develop innovative solutions around existing network technologies and future capability; create product roadmaps and write user stories and requirements.
  • Analyse current and future information technology industry trends to determine their potential impact on business or network systems architecture.
  • Manage multiple projects concurrently and plan the network roadmap.
  • Maintain awareness of emerging technologies, particularly AI and its application across networking, security, infrastructure and managed services.
  • Perform client and market research to define and qualify strategy and direction.

• Technical Leadership & Team Development

  • Lead the training and development of L3/L4 network engineers, acting as design authority and escalation point for their most complex work.
  • Provide mentorship, coaching and professional development support to engineers and designers.
  • Regularly lead self and others; be established as a product subject-matter expert and/or specialist.

• Consultative & Commercial

  • Perform a consultative role for both internal and external customers, at all levels of the organization.
  • Provide technical input into bids, tenders, customer presentations and vendor engagements.
  • Work collaboratively with Sales, Pre-Sales, Delivery, Managed Services, vendors and technology partners to develop commercially viable solutions.
  • Manage the commercial and financial aspects of engineering activity, including forecasting, change management and value engineering initiatives.
  • Develop and maintain strong working relationships with clients, stakeholders and project teams.

• Process & Documentation

  • Proactively contribute to documentation, automation and process improvement.

• Technical Delivery (Project Engineer scope, at senior level)

  • As design authority, you will hold expert-level command of the full technical scope delivered by our Project Engineers — providing design input, review, and escalation support for L3/L4 engineers carrying out this work, including:
  • Network provisioning — VLANs, subnetting, firewalls, IP schemes.
  • Design of resilient network topology, including cabling standards, device selection, and technologies such as LACP / link bundling and active/backup bonding.
  • Configuration and troubleshooting of IPSEC VPNs (site-to-site and remote-access).
  • Firewall clustering and failover configuration.
  • External connectivity (e.g. eBGP) to enable client and third-party vendor connections.
  • VRF configuration, including route leaking, NAT translation and access control lists.
  • Multicast configuration and troubleshooting.
  • Out-of-band management (e.g. Opengear console servers) for remote and resilient access.
  • Server and VM builds, and platform configuration (e.g. cloud interconnects, private hosting environments).

QUALIFICATIONS

• IT operations, NOC, or service desk experience

• Extensive experience in a fast-paced, highly technical network operations environment, with a genuine passion for networking.

• Strong verbal and written communication skills and excellent customer support capabilities.

• Self-motivated, with strong organizational and listening skills; detail-oriented and able to work with minimal supervision.

• Ability to communicate professionally at all levels of the organization, internally and externally.

• Methodical problem-solving skills and mastery of high-level and detailed network design.

• Demonstrated ability to continuously adapt to new technologies and trends and learn quickly.

• Excellent English, spoken and written.

• Network engineering, design and architecture expertise across two or more of: LAN/WAN, firewalls, wireless, security, VoIP, QoS and encryption technologies, adhering to standard design methodologies and best practice.

• Mastery of TCP/IP protocol communications, addressing and subnetting.

• Firewall experience: Checkpoint, Palo Alto, Cisco ASA.

• Extensive knowledge of Cisco's product portfolio — routers, switches, wireless, ACS and ISE.

• Extensive knowledge of network diagnostics, protocols and disciplines — EIGRP, BGP, eBGP, SNMP, VPN, SSH and MPLS.

• Experience designing and implementing AWS and Azure networking solutions, including VPCs, VNets, Network Security Groups, subnets, route tables, internet gateways, NAT gateways and multicast.

• Hands-on experience with AWS and Azure Direct Connect, ExpressRoute, and VPN connectivity for hybrid cloud architectures.

• Proven senior experience in infrastructure engineering or technical project delivery.

• Strong understanding of Juniper and/or Cisco networking, including switching, routing and VLAN configuration.

• Experience in Linux networking and administration — nmtui, netplan, iptables/netfilter — with strong working knowledge of Ubuntu and Red Hat.

• Virtualization experience (VMware or KVM), including vNICs, vSwitches and clustering.

• Strong understanding of hardware — CPUs, RAM and compatibility considerations.

• Understanding of how to create a secure, segmented network topology (VLANs, separate subnets).

• Proficient in the deployment and configuration of virtual machines and operating systems (Windows, Linux).

• Strong understanding of project lifecycle phases and technical delivery workflows.

• Excellent attention to detail and documentation habits.

• Preferred

  • Advanced knowledge of routing and switching protocols.
  • Experience with SDN technologies such as Cisco ACI or VMware NSX.
  • Working knowledge of scripting/automation tools such as Python or Ansible a strong plus.
  • Experience with load balancing technologies.
  • Cisco certifications such as CCNP, CCDP, CCIE or CCDE.
  • AWS Certified Advanced Networking.
  • Microsoft Azure certifications such as AZ-700 (Azure Network Engineer Associate) or AZ-305 (Azure Solutions Architect Expert).
  • Working knowledge of Jira, Lucid, Confluence, Teleport and Tenable.
  • Experience working in a client delivery or professional services environment.
  • Knowledge of private cloud, hybrid networks, or hosted financial platforms.
  • Familiarity with network-side configuration for monitoring tooling (e.g. Grafana, CheckMK).

JOB REQUIREMENTS

• Should be willing to accept a long-term work-from-home arrangement.
• Should be amenable to a permanent mid-shift schedule.