Senior Network Engineer

BRG (UK) Limited; United Kingdom; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading consulting firm is seeking a Senior Network Engineer to join their Global IT team. The ideal candidate will manage and optimize the firm's local and wide area networks while ensuring security and compliance. Responsibilities include designing network architecture, collaborating with cross-functional teams, and maintaining network systems. This role demands strong technical skills and experience in a multi-site organization, with a focus on security and performance.

Qualifications

• 10+ years of Network Engineering experience.
• Extensive knowledge of LAN/WAN technologies and BGP routing.
• Experience with SD-WAN connectivity and Azure networking.

Responsibilities

• Design, implement, and maintain BRG’s LAN/WAN/WLAN.
• Collaborate on architectural designs for large-scale datacenter networks.
• Troubleshoot network systems and devices.

Skills

Network Engineering

Communication

Problem Solving

Tools

Palo Alto Firewalls

Cisco Switching

Meraki

Job description

Senior Network Engineer

Berkeley Research Group provides independent advice, data analytics, authoritative studies, expert testimony, investigations, and regulatory and dispute consulting to Fortune 500 corporations, financial institutions, government agencies, major law firms, and regulatory bodies around the world. BRG experts provide sophisticated economic, financial, and analytical advice across a wide range of disciplines, including antitrust and competition policy, complex damages, finance, healthcare, intellectual property, restructuring, valuation, and workforce issues. In addition, the firm assists clients in major industry sectors with compliance, business process improvement, and strategy consulting.

We are looking for a Senior Network Engineer to join our Global IT team, ideally based from London but could be based from Brussels or Rome.This team looks after a number of different sites and networks and we are looking for an individual with strong technical skills who has experience working across a multi-site organization.

The position will be responsible for the design, implementation, security, maintenance, and optimization of BRG’s local and wide area networks (LAN/WAN/WLAN). This is defined as management of Datacenter and Office based MDF rooms, ownership of our 3^rd party NOC relationship, and Business Continuity Planning and IT Disaster Recovery (BCP/DR).

An overall emphasis on perimeter network security configuration as it applies to datacenter, branch office, and cloud networks to ensure the security of BRG’s employees for both on-prem and cloud services through a Zero Trust approach. This role will be responsible for building and managing an agile network topology that adapts for rapid growth and expansion along with changing business needs that require stable, efficient, and secure access to BRG resources worldwide.A proven cross-disciplinary skillset would be required to efficiently collaborate with Cloud and Infrastructure teams on large scale projects.

Key Contacts:

• This role will interface with the Senior Network Engineering Manager to ensure progress towards roadmap goals is being met and the implementation of new technologies and processes comply with security polices and frameworks.
• Work closely with Cloud, Infrastructure, and Operations teams to seamlessly integrate cloud and on-prem environments and the secure communication between them.Knowledge transfer and communication among teams is critical.
• This role will work with IT Risk and Compliance team on Incident Response, Disaster Recovery and ensuring compliance with all applicable audit standards.

Major Responsibilities:

• Collaborate to develop architectural and engineering designs for large-scale datacenter network infrastructure.
• Take ownership responsibility for large project lifecycle from design through implementation and support.
• Evaluate and present methods for improving performance and/or reliability of the existing network infrastructure.
• Work with Cloud and Infrastructure teams to ensure optimal connectivity / performance of VM hosts and storage devices.
• Maintain and troubleshoot switches, SD-WAN appliances, wireless AP’s, firewalls, IDS/IPS, VPN appliances, vulnerability assessment tools, event and log analysis, security change tracking and other network systems and devices.
• Manage and maintain all aspects of both on-prem and Colo Datacenters, including cabinet design, power, circuits, and network equipment.
• Ownership of all communication circuits and management of diverse ISP’s worldwide, both carrier direct and brokered.
• Troubleshoot systems and networks to identify and correct malfunctions and other operational problems.
• Support / work on Palo Alto firewalls running GlobalProtect VPN.
• Investigate, test, evaluate and remain informed of new technologies, products, and services.
• Collect and present security metrics/dashboards
• Participate and contribute to annual risk assessment exercises

Experience:

• 10+ years of Network Engineering experience.
• Extensive knowledge of LAN/WAN technologies, BGP routing, Catalyst and Nexus Cisco switching, and Meraki switching and wireless AP’s.
• 3+ years of experience with design, implementation, maintenance, and troubleshooting support of SD-WAN connectivity, Meraki MX and VeloCloud experience preferred.
• Foundational understanding of SASE architecture and configuration of components required for implementation, specifically Meraki MX, Cisco Umbrella, Secure Connect, ZTNA, CASB, and FWaaS.
• Experience deploying, managing, administering, and migrating security and Infrastructure platforms in a Hybrid environment, specifically strong in both traditional and Azure networking.

• Ability to design, implement, and support network architectures for Azure cloud-based systems, including virtual networks, subnets, network security groups, and VPNs

• Hands-on experience with Palo Alto firewalls and VPN appliances.
• Experience in implementing or managing a SIEM/XDR/MDR or other security management platform.
• Experience working with a SOC/NOC or other outsourced monitoring support vendor.
• 3+ years of experience working with network and application authentication systems including a strong understanding of authentication protocols such as OAuth, SAML, Kerberos and MFA
• Wireless experience strongly preferred, to include 802.11x standards in a Cisco and Meraki based infrastructure.
• Familiarity with Microsoft NPS for Radius wireless auth.
• Experience with many of the following protocols & technologies: RSTP, VLANs/STP, Trunking (Ether-channel)/LACP, IPv4 & IPv6, TCP, IGMP, LDP, RADIUS, ISE, IPSEC & VPNs, Netflow, DNS, HTTP, DHCP, SNMP, TACACS)
• Knowledge of Microsoft Windows based platforms (Windows Server, Active Directory).
• Strong understanding of desktops (Windows and MacOS), networks, hardware, and cloud platforms.
• Familiarity with industry frameworks and standards such as SOC2, ISO27002, HIPAA, HITRUST

Soft Skills:

• Excellent oral and written communication skills.Ability to present detailed or complicated information in an understandable way to non-technologists.
• Ability to see beyond constraints of the existing environments and identity opportunities for improvement in organized fashion
• Experience in a similar multi-site environment would be very useful in this role

#LI-RT1