Senior Network Engineer

Role Overview

We're looking for a senior engineer to lead the way in our AWS networking space. As we modernise our infrastructure and shift towards cloud-native networking, you'll own the design, automation and evolution of our AWS cloud network, managing it as code with Terraform and setting the standards the wider team builds on.

This is a reliability-first role, with security built into everything we do. We prioritise availability, resilience and operational excellence. You'll design for resilience, plan for failure, apply security best practice by default, and keep our network dependable at scale.

You'll bring your own ideas, expertise, and passion for modern, automated networking, and you'll mentor colleagues and champion best practice. We value people who stay ahead of emerging technologies and can turn new concepts into practical, repeatable solutions.

You'll work across cloud networking, automation, security, and hybrid connectivity as we expand our cloud footprint, giving you real opportunities to shape our future architecture.

What Type of Candidate Are You?

You will be an excellent communicator with strong documentation skills, enabling you to work with developers, systems engineers and data scientists in a complex environment. Building strong working relationships and managing stakeholders across the wider DevOps and platform teams is central to the role, as cloud networking sits alongside their work day to day. You will have attention to detail and the ability to deliver against goals and milestones. You will be a problem-solver and an effective trouble-shooter, able to perform well under pressure. A strong cultural fit for a collaborative, driven, delivery-oriented team that is confident in challenging ideas and contributing perspectives.

You think automation-first: you'd rather codify a network change in Terraform than click through a console, and you care about reproducibility, peer review, and version control for infrastructure. You take ownership, set technical direction, and are comfortable being the person others turn to for AWS networking decisions.

What Will You Be Doing?

• Lead the design, delivery and troubleshooting of our AWS cloud network
• Architect for reliability and resilience: high availability, failover and disaster recovery
• Embed network security by design: segmentation, least-privilege access, secure connectivity and threat protection
• Partner with the Cyber Security team to design, implement, and continuously improve security controls, monitoring capabilities, and cloud network security architecture
• Design and operate AWS networking: VPCs, Transit Gateway, Direct Connect, VPN, Route 53, security groups/NACLs
• Build and maintain network infrastructure as code using Terraform (modules, state, reusable patterns)
• Develop automation and tooling (CI/CD pipelines) for network provisioning and change management
• Deliver and secure hybrid cloud connectivity between AWS, Azure and on-premises data centres
• Implement observability, monitoring and capacity planning across cloud and on-prem networks
• Set standards and mentor the team on cloud networking best practice
• Build strong working relationships and manage stakeholders across the wider DevOps and platform teams

Requirements

What Skills Will You Have?

Must Have:

• Deep AWS networking expertise: VPC, Transit Gateway, Direct Connect, VPN, Route 53, security groups and NACLs
• Infrastructure as Code (Terraform): modules, state management, workspaces
• Designing for reliability and resilience: HA, failover, disaster recovery
• Network security: segmentation, least-privilege access, secure connectivity, threat protection
• Automation and CI/CD: provisioning, pipelines, network tooling
• Routing & Switching (BGP)
• VPNs (IPSec, SSL)
• Hybrid cloud connectivity: on-prem to cloud
• Network Monitoring & Observability
• Technical leadership, setting direction and mentoring

Desirable:

• AWS Advanced Networking Specialty certification (or working towards); Cisco CCIE/CCDE a plus
• Understanding of PKI, certificate lifecycle management, TLS, and cryptographic best practices
• Azure VNets, ExpressRoute
• Firewalls (Palo Alto)
• Cisco ISE 802.1x
• Ansible for configuration management
• SD-WAN

What Tech Do We Use?

• AWS (VPC, Transit Gateway, Direct Connect), Azure
• Terraform and IaC workflows, CI/CD
• LAN/WAN/SD-WAN, Data Centres, VXLANs
• Cisco, Palo Alto
• DNS, DHCP, MPLS, BGP, TCP/UDP
• Linux operating systems