The Network L3 Engineer is responsible for advancing the performance, security, resilience, and operational maturity of the organisation's global network ecosystem spanning 20+ countries and 120+ locations. Reporting to the Network Service Owner, the role drives platform optimisation, lifecycle management, service enhancement, and technical governance across a multi-vendor network environment comprising Fortinet and Cisco security technologies, Cisco Meraki MX platforms, and Meraki wireless infrastructure.
Working within the Network Services function, the Network Engineer applies deep technical expertise to enhance network capabilities, strengthen security controls, improve service reliability, and support the ongoing evolution of enterprise connectivity services. The role contributes to the design, implementation, standardisation, and continuous improvement of network infrastructure, ensuring that network services remain scalable, secure, supportable, and aligned with business requirements.
The position plays a key role in optimising WAN connectivity strategies through effective management of Direct Internet Access (DIA) services, ISP performance, routing efficiency, and network resilience initiatives. Through close collaboration with Cyber Security, Security Operations, Architecture, and Infrastructure teams, the role contributes to strengthening network governance, improving security posture, and ensuring alignment with enterprise control and compliance frameworks.
Success in the role requires a combination of strong technical engineering capability, operational excellence, automation focus, and continuous improvement discipline. The Network Engineer works across global teams, service providers, and technology partners to deliver infrastructure enhancements, mitigate technical risk, reduce operational complexity, and support the long-term evolution of the organisation's network services.
Working within the Network Services function, the Network Engineer applies deep technical expertise to enhance network capabilities, strengthen security controls, improve service reliability, and support the ongoing evolution of enterprise connectivity services. The role contributes to the design, implementation, standardisation, and continuous improvement of network infrastructure, ensuring that network services remain scalable, secure, supportable, and aligned with business requirements.
The position plays a key role in optimising WAN connectivity strategies through effective management of Direct Internet Access (DIA) services, ISP performance, routing efficiency, and network resilience initiatives. Through close collaboration with Cyber Security, Security Operations, Architecture, and Infrastructure teams, the role contributes to strengthening network governance, improving security posture, and ensuring alignment with enterprise control and compliance frameworks.
Success in the role requires a combination of strong technical engineering capability, operational excellence, automation focus, and continuous improvement discipline. The Network Engineer works across global teams, service providers, and technology partners to deliver infrastructure enhancements, mitigate technical risk, reduce operational complexity, and support the long-term evolution of the organisation's network services.
Network Service Engineering & Platform Optimisation
- Drive the ongoing optimisation, resilience, and evolution of global network services across a multi-country, multi-site environment, ensuring connectivity platforms remain aligned with performance, scalability, and business continuity objectives.
- Act as a technical custodian for network security and connectivity platforms, contributing to the enhancement, standardisation, and governance of Fortinet, Cisco, and Meraki-based infrastructure ecosystems.
- Enhance enterprise wireless capabilities through the optimisation of Meraki wireless architecture, configuration frameworks, performance standards, observability, and lifecycle management practices.
- Lead connectivity optimisation initiatives across Direct Internet Access (DIA) and carrier services, improving service resilience, vendor performance, route efficiency, and overall network service effectiveness.
- Collaborate with telecommunications providers and network partners to improve routing strategies, optimise network path selection, strengthen resilience models, and maximise value from connectivity investments.
- Support service reliability and operational maturity through structured technical analysis, root cause elimination, risk mitigation, and the implementation of sustainable improvements that reduce recurring service disruption.
- Deliver network enhancement and transformation initiatives through disciplined change governance, implementation planning, risk assessment, validation, and service assurance practices.
Security, Governance & Compliance
- Partner with Cyber Security and Security Operations teams to strengthen network security posture through the continual improvement of firewall governance, segmentation strategies, access control frameworks, monitoring capabilities, and vulnerability management activities.
- Contribute to audit readiness, regulatory compliance, and control assurance objectives by maintaining robust operational governance, evidence management practices, and documented network control frameworks.
Service Maturity & Continuous Improvement
- Develop and enhance network knowledge assets, architecture documentation, service standards, topology models, connectivity inventories, and operational frameworks that improve supportability, consistency, and service transparency.
- Drive continuous improvement and automation opportunities that enhance network efficiency, reduce operational complexity, improve standardisation, and support the long-term evolution of network services.
Education
- Bachelor’s degree in IT, Computer Science, or a related field, or equivalent practical experience.
- Experience
- 9-12 years’ experience in network engineering / network operations within a multi-site enterprise environment.
- Hands-on experience with enterprise platforms (Fortinet, Cisco, Juniper or Palo Alto).
- Experience troubleshooting ISP circuit issues and coordinating resolution with carriers/ISPs.
- Working knowledge of ITIL-aligned processes (Incident, Problem, Change) and experience supporting services across multiple time zones.
- Strong understanding of core networking: TCP/IP, VLANs, routing, switching, NAT, VPNs, DNS, DHCP, QoS, and troubleshooting methodologies.
- Hands-on capability with Fortinet and Cisco firewall administration, including policy, objects, NAT, VPN, and logging/monitoring integration.
- Strong experience administering and troubleshooting Cisco Meraki (MX and APs) via Dashboard.
- Understanding of DIA connectivity and carrier services; ability to manage ISP escalations and work to restore service quickly.
- Knowledge of routing and internet path considerations (including BGP basics where applicable) to support resilient, cost-effective routing.
- Working knowledge of security principles: segmentation, least privilege, secure configuration, vulnerability management, and audit/compliance expectations.
- Ability to work effectively with Security Operations and Cyber Security teams to follow governance, produce evidence, and maintain secure firewall operations.
- Strong documentation skills (diagrams, standards, change records) and clear communication with technical and non-technical stakeholders.
Essential requirement (non-negotiable) *
- Proven network engineering experience in a multi-site environment, including hands-on troubleshooting and delivery of changes.
- Strong operational knowledge of Cisco Meraki (MX and APs) including configuration, monitoring, and fault isolation.
- Hands-on experience administering enterprise firewalls (Fortinet and/or Cisco), including policy changes performed under governance.
- Experience managing DIA circuits and working with local ISPs/carriers to resolve incidents and improve resilience.
- Good understanding of routing, NAT, VPN technologies, and (where required) BGP fundamentals.
- Ability to work closely with Security Operations / Cyber Security to implement controls, support audits, and maintain secure configurations.
- Strong written and verbal communication skills, with the ability to produce clear documentation and communicate risk/impact during incidents and changes.
Essential Certifications
- Cisco CCNA (or equivalent routing/switching capability).
- Fortinet NSE 4 / Fortinet FCP (or equivalent hands-on Fortinet firewall administration).
Desirable Certifications
- Cisco CCNP (Enterprise or Security).
- ITIL 4 Foundation.
- Security certification (e.g., Security+), and/or vendor firewall specialisms