Network Engineer

Network Engineer
Компания: PentenAmio
Город: Tewkesbury
**Location:** Tewkesbury (~3 days p/w on-site)
**Salary:** £45,000 - £65,000
**Clearance Required:** DV
**About PentenAmio**
PentenAmio is a leading provider of advanced digital security solutions that power national security and resilience across the UK, Australia and our allies. Focused on solving complex digital challenges that others avoid, we embrace the impossible to deliver transformative technologies that protect those who protect us.
Across the UK and Australia, PentenAmio combines a legacy of knowledge and proven delivery across secure mobility and AI-driven deception technologies. Our work spans Government and Defence markets across civil and military applications, powering intelligent advantage on a global scale.
**Typical Activities**
Working in collaboration with internal stakeholders across Service Operations, Solutions Architecture, Project Management and Security / Information Assurance, the Network Engineer will design, build and support the networks that underpin our secure communications services, provide level 3 support for network and voice incidents, and prepare secure and air-gapped environments for accreditation.
* Design, plan and deploy network infrastructure across our hybrid AWS and on-premises estate, working with solutions architects on upcoming projects
* Produce and maintain HLDs, LLDs, network diagrams and as-built documentation
* Configure, deploy and maintain routers, switches, firewalls and load balancers (Cisco, Juniper, Fortinet), including BGP and OSPF routing and site-to-site and remote-access VPNs
* Design, configure and support Cisco Unified Border Element (CUBE), SIP trunking and QoS policies to protect voice quality
* Design, deploy and maintain air-gapped and segregated networks, applying security hardening and baselines (e.g. CIS, NCSC guidance)
* Work with Security / IA teams to meet compliance and accreditation requirements, including documentation, evidence and risk assessments
* Design and manage AWS networking and hybrid connectivity, including Transit Gateway, Direct Connect and site-to-site VPN
* Monitor network and voice service health, analyse traffic patterns and maintain logging to support fault finding and capacity planning
* Provide level 3 escalation support, diagnose outages with suppliers and carriers, and carry out root cause analysis to drive permanent fixes
* Research and evaluate new network technologies, contribute to standards and best practice, and mentor colleagues
**What We're Looking For**
* Proven experience designing, implementing and troubleshooting enterprise network infrastructure
* BGP and OSPF design, configuration and troubleshooting
* Strong knowledge of TCP/IP, VLANs, spanning tree, HSRP / VRRP and QoS, with Cisco routers and switches (IOS / IOS-XE)
* Cisco Unified Border Element (CUBE) experience, including SIP trunking, dial peers and troubleshooting
* Strong understanding of SIP and RTP / RTCP, including call flows, SDP negotiation, codecs and DTMF, and voice QoS
* Experience diagnosing voice issues using debugs, SIP traces and packet capture (e.g. Wireshark)
* Firewall configuration and policy management (Fortinet FortiGate and/or Cisco) and IPsec site-to-site and remote-access VPNs
* AWS networking experience (VPC design, subnets, routing, security groups, Transit Gateway, Direct Connect) and hybrid connectivity using site-to-site VPN and BGP
* Network segmentation, device hardening to recognised standards (e.g. CIS), patching, and working to formal change control
* CCNP Enterprise or equivalent (or working towards), plus the ability to produce HLDs / LLDs and technical documentation and to identify and mitigate risk
**Desirable**
* Experience building and maintaining air-gapped networks, cross-domain solutions or data diodes, and supporting security accreditation (e.g. UK Government / MOD frameworks, NCSC guidance, ISO 27001)
* Cisco Unified Communications Manager (CUCM), secure voice (SIP over TLS, SRTP), other session border controllers or voice gateways, and CCNP Collaboration
* Network automation using Ansible, Terraform or Python, Git for configuration version control, and monitoring tools such as Prometheus, Grafana, Splunk and/or ELK
* AWS Network Firewall & WAF, AWS certification (e.g. Advanced Networking Specialty), or Azure / GCP networking
* EIGRP, MPLS / VRFs, IPv6, load balancers, 802.1X / NAC, and PKI and certificate management
**Why Work at PentenAmio?**
At PentenAmio, we value our employees and offer a comprehensive benefits package, including:
* Life Insurance - X4 Salary
* 2:30pm finish on Fridays
* Option to work 9-day-fortnight
* Private Health Scheme
* EV Salary Sacrifice scheme
* Salary Sacrifice Company Pension, matched up to 10%
* 25 Days Holiday + Bank/Public Holidays
* Enhanced Maternity & Paternity leave
**Additional Perks**
* Free on-site parking
* Casual dress code
* Free fruit in the office
**Qualifications & Eligibility**
**To Be Eligible For This Position You Must**
* Proven experience in network infrastructure; and,
* Be a British citizen; and
* Hold or be eligible for UK National Security Vetting (NSV) - DV level clearance.
PentenAmio is committed to providing equality of opportunity for all. We aim to ensure our workplaces are free from discrimination and that our current and future colleagues are treated fairly and with dignity and respect. Please inform us of any reasonable adjustments that we may need to make.