Network Engineer

Test Triangle; Sheffield; On-site; GBP 55,000 - 75,000; Full time

Job summary

Test Triangle is seeking an experienced network engineer in Sheffield to design, deploy and manage advanced Cisco networks, SD-WAN and SDA fabrics for OT/IT environments. You will implement policy templates, VPN segmentation and WAN edge configurations, ensuring secure, reliable operations across SCADA/ICS interfaces.

The role requires hands-on expertise with Terraform, Ansible, and automation workflows, along with scripting in Python or Bash for automation tasks.

Qualifications

• Solid experience with Cisco switching (IOS-XE), VLANs, STP, RSTP, port security and QoS.
• Hands-on with Cisco SD-WAN, Catalyst SD-WAN, policy templates, VPN segmentation and WAN edge configuration.
• Hands-on experience with Cisco SD-Access (SDA) fabric design, commissioning and operations.
• Working knowledge of Cisco Catalyst Centre - device management, assurance and automation workflows.
• Understanding of OT network architecture, including the Perdue Model and IT/OT DMZ design.
• Familiarity with OT protocols: Modbus, DNP3, EtherNet/IP, PROFINET, IEC 61850, or OPC-UA.
• Experience writing Terraform configurations for infrastructure provisioning.
• Exposure to CI/CD tooling (GitLab CI, GitHub Actions, Jenkins, or equivalent).
• Scripting proficiency in Python and/or Bash for network automation tasks.
• Strong troubleshooting skills across Layers 2-7.
• Experience with Cisco ISE (Identity Services Engine) for AAA, profiling, and TrustSec.
• Knowledge of Ansible or Terraform for network configuration management.
• Familiarity with Cisco NSO or RESTCONF/NETCONF interfaces.
• Exposure to industrial cybersecurity frameworks: IEC 62443, NIST SP 800-82, or NIS2.
• Experience with SCADA/ICS systems (e.g., Ignition, Wonderware, Siemens TIA Portal, Rockwell FactoryTalk).
• Familiarity with network monitoring tools

Skills

Network design

Troubleshooting

IT/OT knowledge

Python/Bash scripting

OT/IT DMZ design

Tools

Cisco IOS-XE

SD-WAN

SD-Access (SDA)

Cisco ISE

Terraform

Ansible

RESTCONF/NETCONF

GitLab CI

GitHub Actions

Jenkins

NSO

Job description

• Strong expertise with Cisco Catalyst switching (IOS-XE), VLANs, STP, RSTP, port security, and Qos.
• Practical experience with Cisco SD-WAN / Catalyst SD-WAN) - policy templates, VPN segmentation, and WAN edge configuration.
• Hands-on experience with Cisco SD-Access (SDA) fabric design, commissioning, and operations.
• Working knowledge of Cisco Catalyst Centre - device management, assurance, and automation workflows.
• Understanding of OT network architecture, including the Perdue Model and IT/OT DMZ design.
• Familiarity with OT protocols: Modbus, DNP3, EtherNet/IP, PROFINET, IEC 61850, or OPC-UA.
• Experience writing Terraform configurations for infrastructure provisioning
• Exposure to CI/D tooling (GitLab CI, GitHub Actions, Jenkins, or equivalent).
• Scripting proficiency in Python and/or Bash for network automation tasks.
• Strong troubleshooting skills across Layers 2-7.
• Experience with Cisco ISE (Identity Services Engine) for AAA, profiling, and TrustSec.
• Knowledge of Ansible or Terraform for network configuration management.
• Familiarity with Cisco NSO or RESTCONF/NETCONF interfaces.
• Exposure to industrial cybersecurity frameworks: IEC 62443, NIST SP 800-82, or NIS2.
• Experience with SCADA/ICS systems (e.g., Ignition, Wonder ware, Siemens TIA Portal, Rockwell FactoryTalk).
• Familiarity with network monitoring tools