Senior Network Engineer

Cisco Systems Inc
Charing Cross, United Kingdom
14 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior

Job location

Charing Cross, United Kingdom

Tech stack

Microsoft Access
Azure
Border Gateway Protocol
Spanning Tree Protocols
Catalyst
Complex Networks
Computer Security
System Configuration
Data Centers
Network Address Translation
Disaster Recovery
VMware ESX Servers
Firmware
Internet Protocol Security (IP SEC)
IP Address Management
Virtual Private Networks (VPN)
Python
Network Security
Network Troubleshooting
Microsoft Office
Network Architecture
Network Monitoring
Routing
Cisco Nexus Switches
Open Shortest Path First
Peering
Powershell
Ansible
Simple Network Management Protocols
Syslog
vSphere
Scripting (Bash/Python/Go/Ruby)
Computer Network Operations
Nx-os
Firewalls (Computer Science)
Amazon Web Services (AWS)
Pure Storage
Firepower
Isilon
Cisco Switches
Cisco networks
VMware

Job description

We are in the midst of a major Data Centre Modernisation Programme - replacing end-of-life core routers and switches with new Cisco Nexus 9300, Catalyst 9200, and Catalyst 8300 platforms across all sites. The successful candidate will be instrumental in the design, deployment, and ongoing operation of this refreshed network estate. Above all, we need someone who can independently diagnose and resolve complex network outages under pressure. While Cisco TAC and vendor support contracts are available, our expectation is that the engineer in this role has the depth of experience and confidence to troubleshoot the vast majority of issues without depending on external support. Practical, proven experience matters more to us than certifications alone. We operate data centres in the UK, US and Switzerland to satisfy client data sovereignty requirements. Each country has a production site and a disaster recovery site with mirrored data and the capability to assume operations at short notice. Key ResponsibilitiesNetwork Operations & TroubleshootingAct as the primary technical authority for all data centre network infrastructure, including switches, routers, and firewalls.Independently diagnose and resolve complex network outages, performance degradations, and connectivity issues across all six data centres, minimising reliance on Cisco TAC.Perform root-cause analysis of incidents and produce detailed post-incident reports with remediation actions.Proactively monitor network health using SNMP, syslog, Cisco FMC, and enterprise monitoring tools; identify and resolve issues before they impact services.Maintain and execute network operations runbooks for daily monitoring of routers, switches, and firewalls.Data Centre Network Refresh ProgrammePlay a lead technical role in the ongoing DC Modernisation Programme alongside our implementation partner- designing, configuring, testing, and deploying new Cisco Nexus 9300, Catalyst 9200, and Catalyst 8300 equipment.Develop and validate detailed cutover plans, runbooks, and rollback procedures for each site refresh.Coordinate with third-party integrators and Cisco during equipment staging, installation, and validation.Ensure seamless migration from end-of-life platforms to the new network architecture with zero or minimal client impact.Firewall & SecurityManage Cisco Firepower 4115 HA firewall pairs across all regions using Cisco Firepower Management Centre (FMC).Design and maintain firewall rulesets, NAT policies, VPN tunnels, and DMZ architectures.Evaluate firmware release notes thoroughly before any upgrade to identify breaking changesSupport ISO 27001 and SOC 2 compliance requirements relating to network security controls.WAN & Office ConnectivitySupport Azure vWAN connectivity between Cisco Meraki office sites and data centres.Assist with IPsec site-to-site VPN configuration between Meraki MX appliances and Azure gateways.Provide escalation support for EUC teams for Meraki office network issues where required.Change & Configuration ManagementFollow and champion ITIL-aligned change management processes for all network changes.Maintain accurate network documentation, topology diagrams, IP address management (IPAM), and configuration backups.Participate in Change Advisory Board (CAB) reviews and produce change implementation plans.Collaboration & Continuous ImprovementWork closely with the infrastructure, VMware, storage, and information security teams.Mentor and upskill junior engineers on Cisco technologies and network best practices.Identify opportunities to automate repetitive network tasks using scripting (Python, Ansible, PowerShell).Contribute to capacity planning and network architecture decisions as the business scales. Technical EnvironmentThe engineer will work with the following technologies on a daily basis:Firewalls: Cisco Firepower 4115 (HA pairs), Cisco FMCCore Switching: Cisco Nexus 9300 Series (NX-OS 10.x, 36-port 40/100G QSFP28)Aggregation/Access Switching: Cisco Catalyst 9200 Series (IOS-XE)Routing: Cisco Catalyst 8300 Series Edge Platforms (IOS-XE, BGP, OSPF, IS-IS)Office Networking: Cisco Meraki MX Firewalls, Meraki Switches, Meraki Wireless APsWAN/Cloud: Azure vWAN, IPsec VPN, Cisco Umbrella, site-to-site tunnelsVirtualisation (awareness): VMware vSphere / vCenter, ESXi, distributed switchesStorage (awareness): Pure Storage, Dell iSCSI SAN, Dell PowerScale (Isilon)Monitoring: SNMP, Syslog, VMware ARIA (on-prem), enterprise alerting toolsCompliance Frameworks: ISO 27001, SOC 2 Type II

Requirements

Skills & Experience Required:We place greater value on demonstrable, hands-on experience than on certifications alone. The ideal candidate will have a track record of independently managing and troubleshooting enterprise-grade Cisco data centre networks in production environments.Data Centre Networking5+ years managing Cisco switches and routers in a multi-site data centre environmentExpert-level Cisco NX-OS (Nexus 9000 series) and IOS-XE (Catalyst) experienceHands-on Nexus 9300 deployment, VPC, vPC fabric configurationCatalyst 9200 access-layer switchingVLAN design, spanning tree (RSTP/MST), port-channels, Layer 2/3 boundariesFirewalls & Security3+ years managing Cisco Firepower / FTD firewalls in HACisco FMC administration, policy design, NAT, and VPN managementStrong understanding of DMZ architecture, ACLs, and zone-based securityFirmware upgrade planning including release-note analysis for breaking changesRouting ProtocolsSolid BGP experience (eBGP peering, route policy, prefix lists, AS-path filters)OSPF multi-area design and troubleshootingStatic routing and policy-based routingWAN & Office NetworkingAzure vWAN / VPN Gateway fundamentalsIPsec site-to-site VPN configuration and troubleshootingAutomation & ScriptingComfortable with CLI-based configuration at scaleScripting with Python or PowerShell for network tasksCompliance & GovernanceExperience working in an ISO 27001 and/or SOC 2 certified environmentUnderstanding of change management (ITIL) processesSoft SkillsProven ability to remain calm and methodical under pressure during outagesSelf-starter who can work independently with minimal supervisionStrong documentation and communication skillsWillingness to participate in an on-call rota and work outside business hours for planned changes CertificationsWhile hands-on experience is our primary measure, we expect the successful candidate to hold or be actively working towards industry-recognised certifications that demonstrate their depth of knowledge.Required:* CCNP Enterprise (or equivalent demonstrated experience at CCNP level)* Demonstrable skills at or above CCNA level as an absolute minimumDesirable:* CCIE Enterprise Infrastructure (or progress towards)* Cisco Certified DevNet Associate* Cisco Firepower / FTD Specialist certification* Microsoft Azure Network Engineer Associate (AZ-700)* ITIL v4 Foundation Working ArrangementsLocation: Hybrid - minimum 2 days per week in the Morae London office. Occasional travel to UK and international data centre sites may be required for refresh deployments and incident response.Hours: Standard business hours with participation in an on-call rota to support the 24/7/365 production environment. Planned maintenance windows typically occur outside business hours.Travel: Occasional travel to data centre sites in the UK, US, and Switzerland as required for major deployments, audits, or critical incident support.

Benefits & conditions

Why Morae?Join a business investing heavily in infrastructure modernisation - you will help shape a brand-new network architecture across six global data centres.Work with the latest Cisco platforms (Nexus 9300, Catalyst 9200, Catalyst 8300, Firepower 4100 series) from day one.A culture that values technical depth and independent problem-solving over process bureaucracy.Morae's approach to employee development is unique in the marketplace. Employees are given opportunities to progress at their own pace and to influence the course of their professional growth.Exposure to a diverse, multi-country environment supporting Tier-1 financial services and legal clients.Competitive salary, benefits, and the opportunity to make a genuine impact in a high-growth organisation. About MoraeMorae is a dynamic, high-growth organisation that provides an integrated suite of solutions to corporate law departments and law firms, and partners with leading software and services providers, both within and outside the legal industry. We are a young company but are made up of seasoned professionals in the legal industry, with a focus on building productive long-term relationships with employees and clients in an environment where collaboration is encouraged, knowledge is shared freely, and diversity of thought, cultures, communities, and points of view is embraced. Our team has the vision to create an effective solution for any business problem and the experience to execute that vision. Learn Our privacy policy can be found at

Apply for this position