Network Engineer L3

Essential Roles & Responsibilities • Diagnose and resolve complex incidents across SDWAN, WAN, LAN/WLAN, VPN/SASE, and load-balancing platforms, ensuring compliance with financial services regulations • Implement network configuration changes using approved templates and security baselines, maintaining audit trails • Validate device configurations, firmware posture, and compliance with golden standards and sector-specific requirements • Support onboarding of new sites/services using Zero-Touch Provisioning (ZTP) and Infrastructure-as-Code pipelines • Manage routing policies, QoS, wireless performance tuning, and load balancer configuration updates • Collaborate with vendor management teams on escalated transport or device issues, ensuring regulatory requirements are met • Contribute to CMDB enrichment through topology validation and asset reconciliation • Support automated impact assessments and change risk analysis, with a focus on operational resilience • Participate in continuous service improvement (CSI) initiatives, such as monitoring optimisation and capacity analysis • Provide technical guidance and mentoring to Level 2 engineers Financial Services & Regulatory Compliance • Ensure all network operations adhere to financial services regulations and frameworks (e.g., FCA, PRA, DORA, ISO 27001, SOC) • Maintain documentation and audit trails for all changes, incidents, and compliance activities • Support risk assessments, compliance reviews, and operational audits as required • Integrate regulatory requirements and security controls into network designs and operations Governance & Reporting • Maintain accurate incident, request, and change records in ServiceNow • Produce and present operational reports, dashboards, and summaries for internal and customer stakeholders, highlighting compliance, risk management, and performance • Support governance initiatives including process improvement, risk analysis, and post-implementation reviews Key Skills • Advanced routing & switching (BGP/OSPF, ACLs, NAT) • SDWAN technologies (e.g. Fortinet, Cisco) • Wireless LAN operations and performance tuning • Familiarity with F5 or equivalent load-balancing platforms • Exposure to automation or scripting (Python, Terraform, Ansible) • Strong troubleshooting and analytical skills • Experience with network compliance, configuration management, and infrastructure documentation • Familiarity with automation frameworks and CI/CD for network configuration (Python, Terraform, Ansible) Behavioural Competencies – Organisational & Behavioural Fit Essential: • 4+ years’ hands-on experience in network engineering, including advanced support and implementation for regulated/financial environments • Strong understanding of network principles, design, operational environments, and compliance requirements • Proven experience with complex incident resolution, change management, and performance optimisation • Experience with data centre network technologies, cloud and security services (Azure, AWS, Load Balancing, DNS) • Effective under pressure; strong written and verbal communication • Familiarity with ITSM workflows, SDWAN/VPN concepts, and ServiceNow • SASE management (Fortinet / Netskope) • Fluent written and spoken English is essential. The role requires the ability to produce audit ready documentation and communicate confidently with senior and executive level stakeholders Highly Desirable: • Experience in managed service or telecom environments, especially for financial services clients • Hands-on provisioning/troubleshooting with Voice technologies (Avaya, Cisco Call Manager) • Relevant certifications (CCNP, Fortinet NSE5/7, Meraki ECMS2, F5) • Experience with SolarWinds, Infoblox, Zero-Touch Deployment, automation tools Critical Competencies – General Fit Personal Attributes: • Technical leader and mentor, passionate about advanced troubleshooting and optimisation • Strong compliance and risk awareness, with attention to regulatory detail Shift & Working Pattern: • Standard business hours, with participation in an oncall rota as required • Occasional weekend engineering coverage will be required, typically limited to a small number of planned weekends per year, to support business continuity, resilience testing, or disaster recovery activities