Network Design Engineer

Salary: £60,000 - 90,000 per year

Requirements

• Strong understanding of routing and switching technologies.
• Practical experience implementing BGP in enterprise environments.
• Knowledge of OSPF, VLANs, NAT, QoS, and IPsec VPN.
• Experience working with Cisco ACI and policy-driven network designs.
• Familiarity with Juniper Mist wireless and access networking.
• Hands-on experience with Fortinet FortiGate, Palo Alto Networks, and Juniper SRX, including policy creation, rule updates, segmentation, and configuration deployment.
• Experience deploying Zscaler ZIA and/or ZPA into enterprise environments.
• Understanding of Zero Trust concepts and secure access patterns.
• Practical experience delivering Azure networking solutions.
• Understanding of hybrid connectivity requirements and cloud security controls.
• Desirable: automation experience with Python, Terraform, GitHub, and/or Ansible.
• Desirable: experience configuring and maintaining F5 LTM.
• Desirable: experience working in large distributed or retail organisations.

Responsibilities

• Deliver project-based network and security changes within a large, distributed retail organisation.
• Work under general direction and take responsibility for our own deliverables.
• Ensure all design output, configuration artefacts, and documentation updates are accurate, consistent, and aligned with established standards.
• Produce and update high-quality network documentation, including HLDs, LLDs, diagrams, and configuration specifications.
• Apply established design patterns for routing, segmentation, cloud connectivity, and secure access.
• Document changes clearly and consistently, ensuring traceability across project phases.
• Contribute to designs for Cisco ACI, including application profiles, endpoint groups, and policy models.
• Contribute to documentation for Juniper Mist wireless and access network deployments.
• Prepare integration and connectivity documentation for Zscaler ZIA and ZPA.
• Deliver planned configuration changes across Fortinet, Palo Alto, and Juniper SRX firewalls.
• Implement routing changes using BGP and associated enterprise protocols.
• Build IPSec tunnels, VPNs, and Zero Trust access configurations following approved designs.
• Configure F5 LTM for application delivery and traffic management.
• Complete migration tasks, cutovers, and validation steps in line with project plans.
• Produce implementation runbooks, testing steps, and post-change records.
• Deploy Azure networking components such as VNets, subnets, NSGs, UDRs, Azure Firewall, and Private Endpoints.
• Update cloud network diagrams and documentation to reflect changes and new deployments.
• Support the delivery of hybrid connectivity using VPN Gateway and ExpressRoute.
• Ensure cloud networking aligns with existing enterprise design standards.
• Use Python to support automation of repeatable network configuration or verification tasks.
• Maintain configuration artefacts and documentation using GitHub version control.
• Apply Terraform modules to deliver network and cloud infrastructure builds where required.
• Contribute to workstreams delivering network modernisation, cloud adoption, and segmentation changes.
• Follow defined procedures when supporting branch, cloud, or data centre migrations.
• Produce migration documentation, implementation notes, and verification reports.
• Identify risks or issues related to network changes and escalate appropriately.

Technologies

• Ansible
• Azure
• Cloud
• Cisco
• Firewall
• FortiGate
• GitHub
• Support
• NAT
• Network
• Python
• Security
• Terraform
• VPN

More

We are recruiting a contract Network Engineer / Network Designer for an initial 3-month engagement with potential extensions. This is a hybrid/remote role within the retail sector, focused solely on project delivery with no BAU or operational support responsibilities. You will work on network modernisation, cloud adoption, segmentation, and migration work across hybrid cloud and on-premises environments, using technologies such as Cisco ACI, Juniper Mist, Fortinet FortiGate, Palo Alto Networks, Zscaler ZIA/ZPA, Azure networking, F5 LTM, and automation tooling including Python, GitHub, and Terraform. We expect all deliverables, documentation, and handover materials to be accurate, consistent, and aligned to our standards.

last updated 25 week of 2026