> Markdown version of [/jobs/ext/1590003-senior-network-engineer](https://www.wearedevelopers.com/jobs/ext/1590003-senior-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network Engineer - **Company:** Defence - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, Application Programming Interfaces (APIs), Border Gateway Protocol, Catalyst (Software), Software Documentation, Information Technology Consulting, Dynamic Host Configuration Protocol, Domain Name System (DNS), Enhanced Interior Gateway Routing Protocol, Trunking, OSI Models, Network Security, Network Service, Packet Analyzer, Network Time Protocols, Open Shortest Path First (OSPF), Release Management, Runbook, TCP/IP, Tcpdump, Wireshark, Management of Software Versions, Virtual Local Area Networks, Wireless Networks, Identity Services Engine, Firewalls (Computer Science), Restful APIs, Cisco Switches, Cisco - **Published:** July 9, 2026 - **Apply:** https://www.totaljobs.com/job/senior-network-engineer/defence-job107661945 ## About the Role * Security clearance (SC cleared or the ability to become SC cleared) * Strong understanding of TCP/IP and OSI model fundamentals * Experience with VLANs, trunking, inter-VLAN routing, DHCP, DNS, NTP, BGP, OSPF, EIGRP * Solid grounding in network security (AAA, segmentation, firewall troubleshooting) * Ability to perform packet-level troubleshooting * Strong experience deploying and supporting Cisco ISE in enterprise environments * Expertise in 802.1X (wired and wireless), MAB, RADIUS authentication flows, and policy enforcement * Deep understanding of CAPWAP, AP join process, and mobility/roaming in Cisco Catalyst 9800 (IOS-XE) WLCs * Experience with RF design (RRM, DCA, channel/power tuning), high-density wireless environments, FlexConnect and local mode deployments * Strong knowledge of WPA2/WPA3 Enterprise and integration with ISE (802.1X, MAB, role-based access) Desirable Skills: * Experience with Cisco DNA Center * Experience with ForcePoint Firewalls * Suitable business and/or technical leadership skills in technology consulting * Basic automation or API exposure (ISE/IOS-XE REST APIs) * Relevant certifications such as CCNP Enterprise, CCNP Security, Cisco ISE Specialist, CWNA/CWNP Soft Skills: * Ability to diagnose cross-platform issues between ISE, WLC, and switching infrastructure * Strong incident troubleshooting under pressure * Clear and structured documentation of configurations, policies, and workflows * Experience working within change and release management processes * Effective stakeholder communication * Experience with vendor escalation and TAC case management ## Description Our client, a prominent player in the Defence & Security sector, is seeking a Security Cleared Senior Network Engineer on a contract basis to support the delivery and optimisation of Cisco ISE (Identity Services Engine) and enterprise wireless (Catalyst 9800) platforms. This hands-on role focuses on engineering, troubleshooting, and implementation, particularly across secure network access (802.1X), policy enforcement, and wireless integration. You will play a key role in resolving complex issues, supporting upgrades, and ensuring stable, secure operation of critical network services., * Lead the design, build, and replacement of legacy Cisco Wireless infrastructure with modern Cisco Catalyst 9800 WLC architecture, ensuring scalable, resilient, and high-performance wireless services * Define and deliver end-to-end wireless migration strategies, including planning, staging, cutover execution, and post-implementation optimisation * Architect and implement high-availability 9800 WLC deployments (SSO, redundancy models), ensuring minimal service disruption and operational resilience * Design and implement enterprise wireless solutions, including SSID segmentation, policy profiles, VLAN mapping, RF optimisation, and seamless roaming * Own the design, upgrade, and lifecycle management of Cisco ISE environments, including version upgrades, patching strategies, backup/restore, and HA topology improvements * Optimise ISE policy frameworks, including authentication and authorisation policies, profiling, posture, and identity-based access control * Design and enhance secure network access solutions leveraging 802.1X and MAB across both wired and wireless environments * Drive performance improvements and service optimisation across wireless and AAA infrastructure, identifying bottlenecks and implementing streamlined, scalable solutions * Troubleshoot complex authentication and connectivity issues, utilising packet capture and deep protocol analysis (Wireshark, TCPdump) * Support change and release activities, ensuring adherence to governance and documentation standards * Manage and escalate issues to vendors (e.g. Cisco TAC) where required * Produce clear and accurate technical documentation, runbooks, and support artefacts ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top Characteristics of a Software Engineer](https://www.wearedevelopers.com/magazine/166-top-characteristics-of-a-software-engineer) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)