Senior Network Engineer

Role overview

We are seeking a Senior Network Engineer (L3) to design, implement, and operate resilient, high-performance, and cost-efficient network infrastructure that supports both internal platforms and customer-facing services.

Operating at Layer 3 escalation and engineering depth, this role is part of a collaborative engineering team responsible for delivering robust, scalable, and secure network solutions. The successful candidate will contribute to and influence network designs through governance forums (TDA / peer review), produce and implement High-Level and Low-Level Design (HLD/LLD) documentation, and adhere to structured Service Design and Service Transition principles.

The role includes the delivery of modern spine-leaf and perimeter network architectures, with a strong focus on operational readiness, scalability, and long-term maintainability.

This is a hands‑on senior engineering position focused on technical depth, implementation, and operational excellence. It is not an architecture‑only role, nor is it a ticket‑based NOC position.

What you'll do

• Contribute to peer‑reviewed network designs and implement approved HLD/LLD artefacts to ensure scalable, resilient, and standards‑aligned infrastructure is delivered correctly the first time.
• Deploy and validate spine‑leaf and enterprise routing architectures to support high‑performance data centre and customer environments without introducing instability or technical debt.
• Adhere to governance frameworks (TDA, peer reviews, change control) to prevent uncontrolled configuration drift and ensure long‑term maintainability.
• Engineer and optimise complex routing environments (BGP, OSPF, EIGRP, MPLS, advanced L2/L3 protocols) to guarantee deterministic failover, predictable convergence, and sustained network stability at scale.
• Diagnose and resolve deep routing and switching issues at Layer 3 to minimise downtime, eliminate recurring faults, and protect service availability.
• Engineer and administer enterprise firewall platforms (Palo Alto, Fortinet, Cisco) to enforce structured, secure, and auditable perimeter controls that protect customer and internal services.
• Design and maintain clean, segmented network zones and rule bases to reduce attack surface, prevent rule sprawl, and support evolving security strategy.
• Lead technical investigations during high‑severity outages to protect platform resilience and restore service with confidence and precision.
• Produce and maintain accurate HLD/LLD documentation, topology diagrams, and configuration standards to eliminate tribal knowledge and enable operational readiness from Day 1.
• Ensure all network changes transition through Service Design, Service Transition and Change Management principles to avoid undocumented risk and operational fragility.
• Identify and implement automation opportunities to reduce manual configuration risk, improve deployment consistency, and increase engineering efficiency at scale.
• Continuously review network performance, resilience, and cost posture to improve reliability while optimising infrastructure spend.

What are we looking for

Technical Skills

• 7+ years hands‑on network engineering experience in enterprise, service provider, or data centre environments.
• Demonstrated ownership of production routing and switching environments, not limited to support or monitoring roles.
• Proven experience implementing and supporting BGP, OSPF, MPLS, and advanced Layer 2/3 architectures in live environments.
• Hands‑on experience administering and engineering enterprise firewall platforms (Palo Alto, Fortinet, Cisco ASA or equivalent).
• Experience operating as a Tier 3 escalation point, leading deep technical diagnostics and contributing to root cause analysis.
• Experience working within structured engineering frameworks involving HLD, LLD, peer review, and controlled service transition.
• Strong documentation, runbook and process design skills.
• Exposure to automation or configuration standardisation practices in network environments.

Experience & education

Strongly preferred

• Cisco CCNP Enterprise (or equivalent advanced routing certification)
• PCNSE (Palo Alto Networks Certified Network Security Engineer) or equivalent Fortinet certification (e.g., NSE4/NSE7)

Highly regarded

• Cisco CCIE (any track)
• Relevant MPLS or Service Provider certifications

Soft Skills

• Very good problem‑solving skills, open mind towards feedback, and can‑do attitude.
• Self‑motivated and self‑managing, with excellent organisational skills.
• Clear communication, documentation, and cross‑team collaboration skills.

What's in it for you