Network Engineer

Sectigo; Manchester; Hybrid; GBP 55,000 - 62,000; Full time

Job summary

Sectigo is seeking a talented Network Engineer to join our global team in the UK. The role focuses on supporting, implementing, managing, and maintaining enterprise networking infrastructure with emphasis on security and reliability.

The ideal candidate has 5+ years in network engineering, hands-on experience with AWS networking, Juniper, Palo Alto, Arista, and SD-WAN, plus strong scripting or IaC skills. This is a full-time hybrid role requiring travel to Manchester and potential international

Qualifications

• 5+ years in network engineering roles supporting enterprise-scale infrastructures.
• Automation and IaC experience with Terraform and Ansible.
• Proficiency in GIT, JSON, YAML, XML; Python a plus.
• AWS network experience is necessary (TGWs, VPCs, etc.).

Responsibilities

• Design, plan, and implement network infrastructure changes.
• Deploy and maintain network security: firewalls, IDS/IPS, VPNs, ACLs.
• Diagnose, troubleshoot, and optimize network performance and reliability.
• Create and maintain network documentation and SOPs, report on security and performance.
• Plan capacity and scalability; ensure regulatory compliance (PCI DSS, GDPR, ISO).
• Mount/install network devices in data centers and offices; support 50 lb equipment.

Skills

5+ years network engineering

AWS networking

Juniper

Palo Alto

Arista

SD-WAN

VPN

Network security

Python

Terraform

Ansible

GIT

Education

Bachelor’s degree in computer science / IT

CCNP

CCIE

CISSP

Tools

Juniper hardware

Palo Alto hardware

Arista hardware

Cloud networking (AWS)

Job description

Sectigo is the most innovative provider of certificate lifecycle management (CLM), delivering solutions that help the world’s largest brands simplify how digital trust is managed and scaled. Sectigo’s automated, cloud-native CLM platform issues and manages digital certificates across enterprise environments, enabling organizations to reduce complexity, accelerate time to value, and strengthen security across environments. Sectigo is one of the largest, longest-standing, and most reputable CAs with more than 700,000 customers, including 65% of the Fortune 500. Sectigo holds six combined active leadership seats in the CA/Browser Forum and ETSI and brings two decades of delivering unparalleled digital trust.

Simplicity at Scale.

How we show up with each other and our customers every day is just as important, and we win as #OneSectigo by living out our core values -Support,Excellence,Communication,Teamwork,Integrity,GrowthandOpenness. We are committed to investing in our diverse teams where everyone understands their role and how they support our strategic goals, we drive operational excellence through scale and efficiency, and we strive to delight our customers and become the market leader in our industry. If you aspire to join a driven team that holds each other accountable to meeting our lofty goals and you’d like to be part of our growth story in delivering a market leading user experience, we’d like to talk to you.

Job Description

We are looking for a talented Network Engineer to join our growing global team at Sectigo. The Network Engineeris responsible forsupporting, implementing, managing, andmaintainingthe organization's networking infrastructure. This individual isdetail-oriented,thrivesin a fast-paced, dynamic environment,andpossessesa proventrack recordin learning, implementing, andmaintainingenterprise networks andnew technologies.Must be a commutable distance to Manchester DC, should the need arise.

Here are the core functions, responsibilities, and expectations for this role:

• Network: Designing, planning, and implementing network infrastructuremove, add, or changes. Including maintenance and support.
• Network Security: Implementing andmaintainingnetwork security protocols, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, access control lists (ACLs), and encryption technologies to safeguard the organization's data and systems.
• Network Troubleshooting and Optimization: Diagnosing and resolving complex network issues, analyzing network performance, and optimizing network infrastructure to ensure high availability, reliability, and performance.
• Documentation and Reporting: Creating andmaintainingnetwork documentation, diagrams, and standard operating procedures (SOPs). Generating reports on network performance, security incidents, and compliance status for management review.
• Capacity Planning: Assessing current and future network capacity requirements based on business growth projections and technology trends. Planning and implementing scalability solutions to accommodate increasing demand.
• Regulatory Compliance: Ensuring network infrastructure compliance with industry regulations, standards, and best practices (e.g., PCI DSS, HIPAA, GDPR, ISO,Webtrust).Conductingaudits andimplementingremediation measures as needed.
• Mounting and Installation: Ability to mount and install network devices such as routers, switches, and servers in data centers and office locations. This includes rack mounting, cable management, and hardware configuration. Candidates must be able to lift network equipment weighing up to 50 lbs.
• Travel & Operational Requirements:
  • Participate in on-call rotation.
  • Travel both internationally and nationally as needed (site supportmeetings, projects, etc.).
  • Frequent visits to Datacenter nearManchester.
• Additional tasks associated with this position may be assigned in response to company initiatives and business needs.

More information about this role:

• This is a full-time and remote position based in U.K., with the ideal candidate reside within 1-hour driving distance to the greater Manchester area.
• The targeted compensation package for this role is between GBP 55,000 and 62,000 per annum, subject upon internal equity and years of experience. We may make further adjustments through an approval process if the targeted compensation range needs to be modifiedbased on business needs and market trends.

Qualifications

Education:

• Bachelor’s degree in computer science, information technology, or related field is strongly preferred. Relevant certifications (e.g., CCNP, CCIE, CISSP) are a plus.

Experience:

• Proven experience (typically 5+ years) in network engineering roles, with a focus on supporting, implementing, and managing enterprise-scale network infrastructures.
• Automation and Infrastructure as Code (IAC):
  • Ability to create, implement, andmaintainautomation usingTerraformandAnsible.
  • ProficiencywithGIT.
  • Comfortable withJSON,YAML, andXML.
  • Knowledge ofPythonis a plus.
• Cloud Environments:
  • AWS network experience is necessary (TGWs, Network ACLs, AWS Network Firewall, Security Groups, VPCs,Subnet,etc..), andgeneral experienceisrequired.
• Must be proficient ininstalling, implementing, supporting, andmaintainingJuniper,Palo Alto, andAristahardware and software for Datacenter and Campus environments.
• Knowledge ofSD-WANtechnologies such as Palo Alto, Aruba/Silverpeak, or Cisco/Viptela is a plus.
• Site to Site VPN: Must be able to design, implement, and support Route based and Policy based VPN. Knowledge of specific technologies such as DMVPN,FlexVPN, and other vendor-specific VPNs is a plus.
• RA VPN: Must be able to design, implement, and support enterprise VPNs such as Global Protect or AnyConnect.
• VXLAN:Understanding of overlay vs underlay and how itinteracts with EVPN
• AAA: Must be able tosupport, implement, andmaintainRadius andTacacs+ for both device access management and NAC (e.g., 802.1x). SAML-based authentication is a plus.
• Network Monitoring: Must be able to implement, support, and use:Netflow, SNMP, and related enterprise tools (e.g.,Solarwinds, Nagios,LiveNX).
• FW Technologies and Traffic Flow: Must understand stateful vs non-stateful rules, symmetric vs non-symmetric, NAT types, order of operation, etc.
• L3 Routing Protocols: Must have knowledge of OSPFv2, OSPFv3 and BGP. Knowledge of others such as ISIS andmBGPis a plus.
• L3: Must know IPv6. IPv4 and IPv6 dual stack is a plus.
• TCP/IP: Must understand path MTU discovery (ICMP), basic TCP flags, etc.
• DNS, DHCP, ARP, Neighbor Discovery: Must have a good understanding.
• Segment Packet Frame troubleshooting:Must be comfortable packet captures andutilizingtools like Wireshark andtcpdump.

Ideal Candidate Profiles, Talents, and Desired Qualifications:

• In-depth knowledge of networking protocols and technologies, including TCP/IP, VLANs, OSPF, BGP, MPLS, VPNs, DNS, DHCP, SNMP, etc.
• Strong understanding of network security principles and best practices, includingfirewallconfiguration, intrusion detection/prevention, encryption, and secure remote access.
• Proficiencyin network hardware and software, such asArista,Cisco, Juniper, Palo Alto, Fortinet, Aruba, etc. Experience with SDN, SD-WAN, and cloud networking is desirable.
• Excellent analytical, problem-solving, and troubleshooting skills, with the ability to diagnose and resolve complex network issues.
• Effective communication and interpersonal skills, with the ability to collaborate with cross-functional teams, articulate technical concepts to non-technical stakeholders, and mentor junior staff.
• Attention to detail, organization, and documentation skills, with a commitment tomaintainingaccuratenetwork documentation and following standard procedures.
• Adaptability and willingness to learnnew technologies, methodologies, and tools to keep pace with evolving business needs and industry trends.

Additional Information

Sectigo is an Equal Opportunity Employer.

At Sectigo, we are committed to providing equal opportunities throughout your career. We hire and promote the most qualified individuals based on their skills, experience, job requirements, and business needs. We do not discriminate on the basis of race, color, religion, age, sex, national origin, disability, pregnancy, genetic information, veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable laws in the countries where we operate.

Our “One Sectigo” culture fosters a strong sense of belonging and supports a respectful, inclusive workplace free from discrimination and harassment.

Use of Artificial Intelligence (AI) in Our Hiring Process at Sectigo:

To enhance your experience, Sectigo may use Artificial Intelligence (AI) tools during the recruitment process. We are committed to using AI responsibly and transparently, ensuring fairness, accuracy, and human oversight at every stage.

Global team. Global reach. Global impact. At Sectigo, we believe doing good is good business. Our strength and our success come from our team of passionate, engaged individuals who make a difference, both locally and globally. Our commitment to engagement is rooted in an unconditionally inclusive workforce, embodying our unique perspectives, heritages, and backgrounds, all as diverse as the experiences of each Sectigo employee. Importantly, we strive to be recognized not only as the CLM leader but also for our intentional efforts to promote employees into the roles that most challenge and excite them, into experiences that allow them to grow their interests as we grow the business. We are committed to bringing a little bit of fun and a whole lot of happiness into everything we do so that our work – and our team members – reflect the positive outcomes we deliver to our customers every day.