Senior Infrastructure Engineer

New Day; Leeds; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading financial services company in Leeds is seeking an experienced Azure Network Engineer to lead the design and implementation of complex Azure network solutions. Candidates should have deep expertise in Azure networking, hybrid cloud connectivity, and strong troubleshooting skills. This role requires collaboration with various teams and offers a hybrid work model.

Qualifications

• Deep expertise in Azure networking services, including Virtual Networks, Subnets, Network Security Groups.
• In-depth knowledge of Hybrid networking technologies like VPN and Firewall.
• Solid understanding of key network protocols such as TCP/IP, BGP, OSPF.

Responsibilities

• Lead the design of Azure network solutions and implement network connectivity strategies.
• Monitor network performance using various tools and document network infrastructure.
• Collaborate with teams for integrated solutions and conduct network security assessments.

Skills

Azure networking services

Hybrid networking

Networking protocols

Infrastructure as Code

Troubleshooting network issues

Communication and presentation skills

Education

Microsoft and Cisco certifications

Tools

Azure Resource Manager

SolarWinds

Job description

What will you be doing day-to-day?

• Lead the design of complex Azure network solutions, including Hub and Spoke, Landing Zones, Virtual Networks, Subnets, Network Security Groups, User-Defined Routes, and Peering.
• Develop and implement network connectivity strategies between Azure, AWS, third-party, and on-premises environments, including SD-WAN, ExpressRoute, Site-to-Site VPN, and Remote VPN.
• Implement and manage network connectivity across NewDay offices using Core and Access switches, WiFi Access Points, Controllers, Firewall and 802.1x authentication.
• Configure and deploy Azure networking services and components using Infrastructure as Code tools such as Azure Resource Manager templates, Bicep, or Terraform.
• Design and implement secure network solutions utilising Azure Firewall, Azure DDoS Protection, and other security services.
• Ensure network designs adhere to industry best practices, security standards, and compliance requirements.
• Configure and troubleshoot routing protocols (e.g., BGP) within Azure and hybrid environments.
• Monitor Azure and NewDay offices network performance, health, and security using Azure Monitor, Network Watcher, SolarWinds and other relevant tools.
• Develop and maintain comprehensive documentation, network diagrams, and operational procedures for Azure, SD-WAN and campus office network infrastructure.
• Implement and enforce network security policies and best practices within NewDay-managed network infrastructure.
• Conduct regular security assessments and audits of the NewDay-managed network environment.
• Collaborate closely with architects, Infrastructure and security engineers, application teams, and other stakeholders to understand requirements and deliver integrated solutions.
• Manage a demanding workload with competing priorities within the Network team in a fast-paced, ever-changing environment.
• Participate in on-call rotation for on-call support as required.

Skills and Experience

Essential

• Deep expertise in Azure networking services, including Azure Virtual Networks, Subnets, Network Security Groups, Azure Firewall, Azure VPN Gateway, Azure ExpressRoute, Traffic Manager, and Azure Monitor.
• In-depth knowledge of Hybrid networking, such as VPN, Firewall, WiFi, LAN and Cisco networking products.
• Solid understanding of network protocols (TCP/IP, BGP, OSPF, DNS, DHCP, HTTP/S).
• Experience with Infrastructure as Code tools (ARM templates, Bicep).
• Experience with hybrid cloud connectivity and network integration between on-premises and Azure environments.
• Strong troubleshooting and problem-solving skills for complex network issues.
• Excellent communication, interpersonal, and presentation skills.
• Ability to work independently and as part of a collaborative team.

Desirable

• Microsoft and Cisco certifications in networking.
• Experience with other cloud platforms such as AWS.
• Knowledge of network security best practices, including threat detection and prevention.
• Experience with network monitoring and analysis tools beyond native Azure offerings.

Your Personal Attributes

• Problem Solving: Candidate should have a strong logical and methodical approach to solving problems.
• Independent: Work unsupervised with a high level of self-motivation to the highest standard within ambitious timescales.
• Collaborative: The candidate must be able to work cross functionally to achieve the best outcome for partners and customers to identify and propose ways forward.

#LI-Hybrid

#LI-TM1

We work with Textio to make our job design and hiring inclusive.

Permanent