Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Version 1 is seeking an experienced infrastructure expert to own the most complex issues across on‑premises, AWS, Azure and hybrid environments, acting as the final escalation point. You will lead a multi‑year cyber security uplift programme including Zscaler SASE adoption and zero trust alignment.
Responsibilities include incident escalation, coordinating engineers and vendors, and mentoring junior staff while shaping technical standards. Strong cloud and network expertise is essential.
Version 1 has celebrated30 yearsinbusinessand continues to be trusted by global brands to delivertechnology and transformationsolutions that drive customer success. Ourdeepexpertiseenables our customers to navigate the rapidlyevolving technology landscape. We foster strong partnerships withglobal technology leadersincluding Microsoft, AWS, Oracle, Red Hat,OutSystems, Snowflake, ensuring that our customers are provided with the highest quality solutions and services.
We’rean award-winning employer reflecting how our employees are at the very heartof whatwe do:
We’rea corevalues drivencompany, we hire people who share our values, and we reward those who display and foster them,it’sdeeply embedded within our DNA. Invest in us andwe’llinvest in you!.
Role overview
You will own the most complex infrastructure and network issues across on-premises, AWS, Azure and hybrid environments, acting as the final technical escalation point before vendors.
Alongside operational ownership, you will play a lead engineering role in a multi-year cyber security uplift programme: rolling out Zscaler SASE (ZIA, ZPA), retiring Always-On VPN, and bringing customer remote access services in line with Zero Trust controls.
Key responsibilities
Senior escalation and technical leadership
Act as the Level 3 escalation point for Level 1 and Level 2 teams, owning critical incidents, major problems and complex service requests through to resolution.
Lead technical bridges during major incidents, coordinating engineers, vendors and stakeholders and communicating impact clearly to management.
Mentor Level 2 engineers, review their fixes and build team capability through documented troubleshooting approaches.
Set technical standards for network, server and cloud configuration, and review changes raised by other engineers.
SASE / SSE and Zero Trust (programme duties)
Engineer and operate the Zscaler platform: ZIA for internet and SaaS security, ZPA for private application access.
Deploy and maintain ZPA App Connectors in AWS, including integration with AWS Transit Gateway to reach customer jump service environments.
Lead phased migration of users from Always-On VPN to ZPA, including pilot groups, parallel running, rollback planning and final decommissioning of RRAS infrastructure.
Integrate Zscaler with Microsoft Entra ID for authentication, user group policy and conditional access.
Configure ZIA policy for URL filtering, SSL inspection, DLP enforcement and AI application controls, working with Security Operations on tuning and exceptions.
Deploy and support Zscaler Zero Trust Branch and SD-WAN appliances at office sites.
Work directly with Zscaler Professional Services and implementation partners during deployment, then take ownership of the platform as business-as-usual.
Produce design documents, runbooks and knowledge transfer material so Level 1 and Level 2 teams can support the platform after go-live.
Administer and troubleshoot AWS and Microsoft Azure: VPCs and VNets, Transit Gateway, routing, security groups, compute, identity and service availability.
Support Windows Server and Linux estates, including Active Directory, patching, hardening and performance diagnosis.
Support virtualisation, storage and backup platforms, and lead upgrades and patching through change control.
Cloud and server infrastructure
Problem management and improvement
Lead root-cause analysis for major and repeat incidents, and track remediation actions to closure.
Improve monitoring and alerting coverage across network, SASE and cloud layers.
Automate repetitive tasks with PowerShell, Python or Bash, and use infrastructure-as-code where it reduces configuration drift.
Apply security, compliance and change management processes across all environments.
Support vulnerability remediation, Cloud Security Posture Management findings, audits and ISO 27001 evidence gathering.
Escalate risks and service-impacting issues promptly to the Programme Director, Security Lead and management.
Security, risk and compliance
Role and Responsibility
We are looking for 8+ years in infrastructure, networking or cloud roles within complex IT environments, including at least 3 years at senior or Level 3 escalation level.
Hands-on SASE or SSE deployment and operational experience; Zscaler (ZIA, ZPA) strongly preferred, with Netskope, Palo Alto Prisma Access or Cloudflare One also considered.
Hands-on configuration and troubleshooting experience with at least two of: Juniper (Junos), Fortinet FortiGate, Palo Alto Networks (PAN-OS).
Strong networking knowledge: TCP/IP, DNS, DHCP, BGP, OSPF, switching, firewalls, IPsec and SSL VPN.
Hands-on administration of both AWS and Microsoft Azure, including cloud networking (Transit Gateway, VNet peering, hybrid connectivity).
At least one cloud certification at associate level or higher (e.g. AWS Solutions Architect Associate, Azure Administrator Associate, Azure Network Engineer Associate).
Proven experience supporting Windows Server and Linux environments.
Experience integrating network access with identity platforms, ideally Microsoft Entra ID.
Track record of leading infrastructure migrations or VPN replacement projects from pilot to full rollout.
Ability to interpret logs and packet captures and isolate faults across on-premises, cloud and SASE paths.
Clear communication with technical and non-technical stakeholders, including vendors and customers.
Zscaler certifications: Zscaler Digital Transformation Administrator (ZDTA) or Engineer (ZDTE).
Vendor certifications: Palo Alto PCNSE, Fortinet FCP or FCSS (formerly NSE 4 to 7), Juniper JNCIS or JNCIP.
Experience with SD-WAN and Zero Trust branch deployments.
Experience with DLP, SSL inspection policy design and Microsoft Purview integration.
Infrastructure-as-code experience (Terraform, Ansible) and scripting in PowerShell, Python or Bash.
Interest in applying AI tools responsibly to infrastructure operations and diagnosis.
Experience supporting customer-facing remote access or managed service environments.
Calm and methodical under pressure, with confidence to own unfamiliar problems and drive them to resolution.
Why Version 1?
At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability.
And many more exciting benefits… drop us a note to find out more.
Version1 is an equal opportunities employer.
We are committed to building a diverse,inclusiveand respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring including those shaped by disability and neurodiversity.
We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact your recruiter at Version 1. We will consider all requests carefully,respectfullyand confidentially.