Sr. Network Infrastructure Engineer

Overview

The Senior Network Engineer will own the design, architecture, implementation, and ongoing management of the company's network and connectivity layer across on‑premises, virtualized, and cloud environments. This is a senior, hands‑on technical role focused on building secure, scalable, and resilient network architectures, while also setting standards, driving improvements, and taking ownership of network strategy and execution.

While operational responsibilities are included, the role goes beyond day‑to‑day network administration. The successful candidate will act as a senior technical authority for networking, proactively designing future‑proof solutions, leading complex initiatives, and ensuring that network architecture aligns with security, performance, and business requirements.

Key Responsibilities

Network Architecture & Design

• Design, implement, and evolve the enterprise network architecture across on‑premises, virtualized, and cloud platforms.

• Design scalable, resilient network topologies, including IP addressing, subnetting, segmentation, routing, and inter‑site connectivity.

• Design and maintain secure network segmentation strategies (VLANs, DMZs, east‑west traffic controls).

• Architect network connectivity solutions for on-prem infrastructure, offices, remote sites, and cloud workloads.

• Help design and maintain Azure networking, including VNets, subnets, routing, hybrid connectivity patterns.

Network Security & Access Control

• Design and manage firewall and gateway architecture, including policy design, traffic flows, and security zoning.

• Lead the design, deployment, and continuous improvement of certificate‑based network authentication solutions.

• Implement and operate 802.1X for wired and wireless networks, including full lifecycle design (PKI integration, RADIUS, client authentication, and enforcement).

• Design secure network services on both wired and wireless access models aligned with least‑privilege principles.

• Work closely with security teams on network hardening, monitoring, and incident response activities.

Network Platforms & Technologies

• Help design and manage enterprise firewalls (e.g. Fortinet FortiGate), when necessary, including security features.

• Own switching and wireless architectures, including enterprise switches and access points (e.g. Fortinet and Ubiquiti).

• Ensure consistent configuration standards, firmware lifecycle management, and resilience across all network devices.

• Act as the senior technical escalation point for complex network incidents and outages.

• Engage with third-party service providers, such as Fortinet, to help manage the network equipment and deployments.

Virtualisation & Network Integration

• Support optimisation and management of virtual networking within VMware vSphere environments, including distributed switching and network integration.

• Ensure network designs adequately support virtualised workloads, VDI, RDS, and low-latency engineering applications.

• Optimise network performance and reliability for virtual platforms and latency‑sensitive workloads.

Governance, Standards & Documentation

• Improve and maintain network standards, design principles, and reference architectures.

• Ensure all network designs, configurations, and dependencies are accurately documented.

• Participate in change management, risk assessments, and technical reviews for network‑related changes.

• Support the definition of monitoring, alerting, SLAs, and KPIs for the network layer.

Leadership & Ownership

• Take ownership of the network domain, proactively identifying risks, gaps, and improvement opportunities.

• Provide technical leadership and mentorship to other system engineers and administrators when necessary.

• Contribute to technology roadmaps and long‑term infrastructure strategies from a networking perspective.

• Collaborate with teams to deliver integrated solutions.

Essential Skills & Experience

• Proven experience operating at senior level in enterprise networking roles.

• Strong hands‑on expertise in routing, switching, subnetting, and network segmentation.

• Extensive experience with firewall and gateway platforms (e.g. FortiGate), including VPNs and security policy design.

• Practical experience implementing certificate‑based authentication, including PKI integration, RADIUS, and 802.1X. 

• Fortinet FortiNAC hands-on experience desirable.

• Strong understanding of wired and wireless network design and security.

• Ability to operate as both senior engineer and technical designer.

Desirable Skills & Certifications

• Fortinet certifications (minimum NSE 4 or Fortinet Certified Professional - Secure Networking).

• Cisco or equivalent networking certifications (CCNA / CCNP or similar).

• Experience with NAC solutions.

Personal Attributes

• Strong sense of ownership and accountability for technical outcomes.

• Proactive, self‑driven, and comfortable working with minimal direction.

• Able to design solutions from first principles and carry them through to implementation.

• Excellent communication skills, able to explain complex network concepts to both technical and non‑technical stakeholders.

• Detail‑oriented with a strong focus on security, reliability, and long‑term maintainability.