Description:
As a Network Architect, you will play a key role in designing and advancing enterprise and OT network architectures across major digital programmes, including SD‑WAN adoption, OT/IT integration, cybersecurity uplift, and global network modernisation. You will define standards, create architectures, and guide the introduction of new technologies such as 5G, edge computing, and automation. You will work closely with key customers to provide architectural leadership and ensure secure, scalable network solutions.
Your responsibilities:
- Lead integration of industrial control systems (ICS) with enterprise networks while preserving security boundaries.
- Design resilient, highly available LAN, WAN, and SD‑WAN network architectures for industrial and enterprise environments.
- Investigate network issues, perform root‑cause analysis, and recommend technical enhancements.
- Contribute to OT and IT network roadmaps, reference architectures, standards, and patterns.
- Produce high‑level and detailed designs covering integration, data, platform, and security requirements in Agile or Waterfall environments.
- Represent network designs to the IT Design Authority and ensure alignment with standards.
- Support pre‑sales activities including effort estimation and solution shaping.
- Produce technical documentation such as firewall specs, DNS designs, load‑balancing specs, certificates, and security frameworks.
- Lead or participate in technical workshops with internal stakeholders and external vendors.
- Support intelligent process automation discovery initiatives.
- Review solution implementations to ensure compliance with approved designs.
Your Profile
Essential skills/knowledge/experience:
- Strong understanding of OT gold standards and the UK’s Cyber Assessment Framework (CAF).
- Experience implementing Zero Trust concepts for OT without disrupting legacy systems.
- Proven track record delivering network and security architectures across OT and IT environments.
- Hands‑on experience with SD‑WAN technologies and network tools such as DNA‑S.
- Ability to produce high‑quality designs with strong error‑handling, monitoring, and logging principles.
- Knowledge of best practices for secure architecture in OT and IR environments.
- Experience working on transformation programmes using agile methodologies.
- Willingness to evaluate emerging technologies and drive innovative solutions.
- Experience leading technical teams or mentoring junior engineers.
- Ability to collaborate effectively with offshore delivery teams.
- Strong troubleshooting skills in Cisco environments (Nexus, Enterprise routers, LAN switches).
- Knowledge of major firewall technologies including Cisco ASA, Palo Alto, Fortinet.
- Experience with BIG-IP F5 load balancers.
- Hands-on experience with security technologies (Pulse Secure SSL VPN, Checkpoint, Palo Alto, VMware NSX).
- Working knowledge of SAML, SSO, LDAP, Active Directory.
- Deep understanding of IPSEC, GRE, HTTP/HTTPS, DNS protocols.
- Experience with Proxy and SSL technologies.
- Strong understanding of cybersecurity protocols, technologies, and applications.
-
Desirable skills/knowledge/experience:
- Industry certifications in networking or security (e.g., CCNP, CCIE, CISSP) – optional but beneficial.
- Knowledge of Microsoft Visio and Lucidchart for architecture diagramming.