Hays Specialist Recruitment Limited
West Drayton, Middlesex
Job Title: Networks Lead - TransformRole Purpose:The Networks Lead for the Transform is accountable for the definition, ownership, and continual evolution of the enterprise network services supporting all IAG Transform employees and business applications. This role ensures seamless, secure, and resilient connectivity across locations, multiple application environments (including SaaS and AWS-hosted apps), and operating company (OpCo) boundaries, in line with the highest quality standards applying to company Transform.Key Responsibilities: Network Service Definition & Ownership:Own all facets of the Transform Network Service, incorporating Connectivity Services, Next Generation Firewall, LAN & Wi-Fi, Cloud Secure Edge, and Break-Fix support, as outlined in the Service Design Document. Connectivity Strategy:Architect and manage robust, low-latency, and resilient connectivity between all Transform locations, cloud environments (including AWS), SaaS applications, and other OpCos. Application Enablement:Guarantee reliable and secure access to a diverse application landscape, including SaaS, cloud-hosted, and on-premises solutions, for all company Transform users. VPN & Remote Access:Ensure seamless VPN and secure remote access for applications and users as required, supporting flexible and distributed working models. OpCo Integration:Enable and govern secure, policy-compliant connectivity between Transform apps and those of other OpCos. Facilitate both inbound and outbound connectivity while managing risk and maintaining service integrity. Performance Management:Define and monitor service levels (availability, latency, packet loss, incident response and resolution times). Proactively address issues impacting service quality. Security & Compliance:Oversee next generation firewall deployments, SSE/cloud security services, and enforce policy-based access controls. Ensure compliance with all regulatory and business requirements. Incident & Problem Management:Lead the network incident response, prioritization, and escalation processes. Work closely with engineering and service desk teams on rapid restoration and continuous improvement. Vendor & Stakeholder Management:Manage relationships with third-party service providers, technology partners, and internal stakeholders to deliver on service commitments and drive innovation. Continuous Improvement:Review and update the Network Service Design Document as technology, business needs, or regulatory obligations evolve. Implement best practices for service reliability, scalability, and user experience. Key Service Domains: Connectivity Services:10Gbps links, data centre cross-connects, Smart Wires (EoF/EoC), resiliency (dual/single path), national and international reach. Next Generation Firewall:HA pair deployment, threat detection, policy enforcement, and continuous monitoring. LAN & Wi-Fi:Wired and wireless infrastructure across all sites, incident classification and rapid resolution, monthly site availability. Prisma Access SSE/Cloud Edge:Secure access for remote and distributed users, zero trust enablement, integration with cloud/on-premise environments. Break-Fix:24/7/4 and Next Business Day hardware support, on-site engineer dispatch, and flexible response options. Required Experience & Skills: Proven leadership in enterprise network architecture, operations, and service design, ideally in complex, multi-location, and multi-OpCo environments. Expertise in high-speed WAN, data centre, and cloud connectivity (10Gbps+, cross-connects, Smart Wires, etc.). Strong background in secure remote access (VPN, SSE), cloud security, and firewall technologies (NGFW, HA configurations). Hands-on experience with LAN & Wi-Fi design, deployment, and troubleshooting at scale. Track record of defining and managing SLAs for latency, packet loss, availability, incident response, and service restoration. Skilled in managing vendor partnerships, contract negotiations, and service escalations. Excellent communication and stakeholder engagement skills, with the ability to translate technical solutions into business value. Experience in regulated environments and alignment with compliance requirements. Continuous improvement mindset, embracing technological evolution and process optimisation. Key Performance Indicators: Network availability in line with tiered targets (e.g. up to 99.999% for resilient configurations). Latency and packet loss maintained within agreed thresholds (e.g. as low as 1 ms latency, Timely incident response and service restoration, with adherence to documented Time to Fix targets (e.g., 4 hours for Severity 1 incidents). Secure, policy-compliant enablement of application connectivity across company Transform and OpCos. Successful delivery of connectivity for all required applications. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
Job Title: Networks Lead - TransformRole Purpose:The Networks Lead for the Transform is accountable for the definition, ownership, and continual evolution of the enterprise network services supporting all IAG Transform employees and business applications. This role ensures seamless, secure, and resilient connectivity across locations, multiple application environments (including SaaS and AWS-hosted apps), and operating company (OpCo) boundaries, in line with the highest quality standards applying to company Transform.Key Responsibilities: Network Service Definition & Ownership:Own all facets of the Transform Network Service, incorporating Connectivity Services, Next Generation Firewall, LAN & Wi-Fi, Cloud Secure Edge, and Break-Fix support, as outlined in the Service Design Document. Connectivity Strategy:Architect and manage robust, low-latency, and resilient connectivity between all Transform locations, cloud environments (including AWS), SaaS applications, and other OpCos. Application Enablement:Guarantee reliable and secure access to a diverse application landscape, including SaaS, cloud-hosted, and on-premises solutions, for all company Transform users. VPN & Remote Access:Ensure seamless VPN and secure remote access for applications and users as required, supporting flexible and distributed working models. OpCo Integration:Enable and govern secure, policy-compliant connectivity between Transform apps and those of other OpCos. Facilitate both inbound and outbound connectivity while managing risk and maintaining service integrity. Performance Management:Define and monitor service levels (availability, latency, packet loss, incident response and resolution times). Proactively address issues impacting service quality. Security & Compliance:Oversee next generation firewall deployments, SSE/cloud security services, and enforce policy-based access controls. Ensure compliance with all regulatory and business requirements. Incident & Problem Management:Lead the network incident response, prioritization, and escalation processes. Work closely with engineering and service desk teams on rapid restoration and continuous improvement. Vendor & Stakeholder Management:Manage relationships with third-party service providers, technology partners, and internal stakeholders to deliver on service commitments and drive innovation. Continuous Improvement:Review and update the Network Service Design Document as technology, business needs, or regulatory obligations evolve. Implement best practices for service reliability, scalability, and user experience. Key Service Domains: Connectivity Services:10Gbps links, data centre cross-connects, Smart Wires (EoF/EoC), resiliency (dual/single path), national and international reach. Next Generation Firewall:HA pair deployment, threat detection, policy enforcement, and continuous monitoring. LAN & Wi-Fi:Wired and wireless infrastructure across all sites, incident classification and rapid resolution, monthly site availability. Prisma Access SSE/Cloud Edge:Secure access for remote and distributed users, zero trust enablement, integration with cloud/on-premise environments. Break-Fix:24/7/4 and Next Business Day hardware support, on-site engineer dispatch, and flexible response options. Required Experience & Skills: Proven leadership in enterprise network architecture, operations, and service design, ideally in complex, multi-location, and multi-OpCo environments. Expertise in high-speed WAN, data centre, and cloud connectivity (10Gbps+, cross-connects, Smart Wires, etc.). Strong background in secure remote access (VPN, SSE), cloud security, and firewall technologies (NGFW, HA configurations). Hands-on experience with LAN & Wi-Fi design, deployment, and troubleshooting at scale. Track record of defining and managing SLAs for latency, packet loss, availability, incident response, and service restoration. Skilled in managing vendor partnerships, contract negotiations, and service escalations. Excellent communication and stakeholder engagement skills, with the ability to translate technical solutions into business value. Experience in regulated environments and alignment with compliance requirements. Continuous improvement mindset, embracing technological evolution and process optimisation. Key Performance Indicators: Network availability in line with tiered targets (e.g. up to 99.999% for resilient configurations). Latency and packet loss maintained within agreed thresholds (e.g. as low as 1 ms latency, Timely incident response and service restoration, with adherence to documented Time to Fix targets (e.g., 4 hours for Severity 1 incidents). Secure, policy-compliant enablement of application connectivity across company Transform and OpCos. Successful delivery of connectivity for all required applications. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
Proactive Appointments
Network Automation Engineer Hybrid - Automation (Python/Ansible/Terraform) - Palo Alto This is an engineering role focused on enterprise network design, implementation, security and modernisation . The successful candidate will take ownership of complex infrastructure initiatives, working closely with architecture teams and senior stakeholders to deliver projects from concept through to full implementation. There is a focus on Automation (Python/Ansible/Terraform) and Palo Alto experience, particularly within a project environment rather than BAU. Key Responsibilities Implement new network and network security technologies as defined by enterprise architecture. Build, configure and test network infrastructure solutions across on-prem and cloud environments. Contribute to the research and recommendation of innovative technologies to improve performance, resilience and scalability. Engineer solutions using enterprise blueprints and standards. Design and implement resilient architectures with disaster recovery and business continuity in mind. Work with technologies including switches, routers, firewalls, wireless platforms , SDN fabrics, load balancers, NAC and cloud networking components. Provide Tier 3 engineering support for complex incidents and escalations. Participate in a 24x7 on-call rotation as required. Produce and maintain detailed network documentation using Microsoft Visio. Maintain and continuously improve network security posture in line with regulatory frameworks including PCI-DSS, PII, CIS and NIST. Required Experience & Skills 5-7+ years of experience designing, implementing and supporting medium to large enterprise networks (10,000+ users). Palo Alto firewall platforms (Pan-OS, Threat Prevention, User-ID, GlobalProtect, HA, Prisma Access) Automation and Scripting (Python/Ansible/Terraform Strong hands-on experience with Cisco enterprise technologies . CCNP Enterprise (R&S) level knowledge required. 1-2 years' experience designing and supporting data centre spine-leaf fabrics (Cisco / Arista). Experience with Cisco DNA Center . Experience with SD-WAN technologies (Cisco, Palo Alto ION). Enterprise-scale Cisco Wireless experience (WLC, FlexConnect, CAPWAP). Desirable Experience Remote access VPN technologies. Certificate lifecycle management (Venafi, PKI). NAC solutions (Cisco ISE, Forescout). Infoblox DNS / IPAM. Cloud networking design and security principles. Network monitoring tools such as SevOne, SolarWinds, Datadog or Splunk. Knowledge of network security architecture, IDS/IPS, VPNs and SSL technologies. Network Automation Engineer Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Network Automation Engineer Hybrid - Automation (Python/Ansible/Terraform) - Palo Alto This is an engineering role focused on enterprise network design, implementation, security and modernisation . The successful candidate will take ownership of complex infrastructure initiatives, working closely with architecture teams and senior stakeholders to deliver projects from concept through to full implementation. There is a focus on Automation (Python/Ansible/Terraform) and Palo Alto experience, particularly within a project environment rather than BAU. Key Responsibilities Implement new network and network security technologies as defined by enterprise architecture. Build, configure and test network infrastructure solutions across on-prem and cloud environments. Contribute to the research and recommendation of innovative technologies to improve performance, resilience and scalability. Engineer solutions using enterprise blueprints and standards. Design and implement resilient architectures with disaster recovery and business continuity in mind. Work with technologies including switches, routers, firewalls, wireless platforms , SDN fabrics, load balancers, NAC and cloud networking components. Provide Tier 3 engineering support for complex incidents and escalations. Participate in a 24x7 on-call rotation as required. Produce and maintain detailed network documentation using Microsoft Visio. Maintain and continuously improve network security posture in line with regulatory frameworks including PCI-DSS, PII, CIS and NIST. Required Experience & Skills 5-7+ years of experience designing, implementing and supporting medium to large enterprise networks (10,000+ users). Palo Alto firewall platforms (Pan-OS, Threat Prevention, User-ID, GlobalProtect, HA, Prisma Access) Automation and Scripting (Python/Ansible/Terraform Strong hands-on experience with Cisco enterprise technologies . CCNP Enterprise (R&S) level knowledge required. 1-2 years' experience designing and supporting data centre spine-leaf fabrics (Cisco / Arista). Experience with Cisco DNA Center . Experience with SD-WAN technologies (Cisco, Palo Alto ION). Enterprise-scale Cisco Wireless experience (WLC, FlexConnect, CAPWAP). Desirable Experience Remote access VPN technologies. Certificate lifecycle management (Venafi, PKI). NAC solutions (Cisco ISE, Forescout). Infoblox DNS / IPAM. Cloud networking design and security principles. Network monitoring tools such as SevOne, SolarWinds, Datadog or Splunk. Knowledge of network security architecture, IDS/IPS, VPNs and SSL technologies. Network Automation Engineer Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Proactive Appointments
Network Engineer Hybrid - Palo Alto - Automation (Python/Ansible/Terraform) This is an engineering role focused on enterprise network design, implementation, security and modernisation . The successful candidate will take ownership of complex infrastructure initiatives, working closely with architecture teams and senior stakeholders to deliver projects from concept through to full implementation. There is a focus on Automation (Python/Ansible/Terraform) and Palo Alto experience, particularly within a project environment rather than BAU. Key Responsibilities Implement new network and network security technologies as defined by enterprise architecture. Build, configure and test network infrastructure solutions across on-prem and cloud environments. Contribute to the research and recommendation of innovative technologies to improve performance, resilience and scalability. Engineer solutions using enterprise blueprints and standards. Design and implement resilient architectures with disaster recovery and business continuity in mind. Work with technologies including switches, routers, firewalls, wireless platforms , SDN fabrics, load balancers, NAC and cloud networking components. Provide Tier 3 engineering support for complex incidents and escalations. Participate in a 24x7 on-call rotation as required. Produce and maintain detailed network documentation using Microsoft Visio. Maintain and continuously improve network security posture in line with regulatory frameworks including PCI-DSS, PII, CIS and NIST. Required Experience & Skills 5-7+ years of experience designing, implementing and supporting medium to large enterprise networks (10,000+ users). Palo Alto firewall platforms (Pan-OS, Threat Prevention, User-ID, GlobalProtect, HA, Prisma Access) Automation and Scripting (Python/Ansible/Terraform Strong hands-on experience with Cisco enterprise technologies . CCNP Enterprise (R&S) level knowledge required. 1-2 years' experience designing and supporting data centre spine-leaf fabrics (Cisco / Arista). Experience with Cisco DNA Center . Experience with SD-WAN technologies (Cisco, Palo Alto ION). Enterprise-scale Cisco Wireless experience (WLC, FlexConnect, CAPWAP). Desirable Experience Remote access VPN technologies. Certificate lifecycle management (Venafi, PKI). NAC solutions (Cisco ISE, Forescout). Infoblox DNS / IPAM. Cloud networking design and security principles. Network monitoring tools such as SevOne, SolarWinds, Datadog or Splunk. Knowledge of network security architecture, IDS/IPS, VPNs and SSL technologies. Network Engineer Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Network Engineer Hybrid - Palo Alto - Automation (Python/Ansible/Terraform) This is an engineering role focused on enterprise network design, implementation, security and modernisation . The successful candidate will take ownership of complex infrastructure initiatives, working closely with architecture teams and senior stakeholders to deliver projects from concept through to full implementation. There is a focus on Automation (Python/Ansible/Terraform) and Palo Alto experience, particularly within a project environment rather than BAU. Key Responsibilities Implement new network and network security technologies as defined by enterprise architecture. Build, configure and test network infrastructure solutions across on-prem and cloud environments. Contribute to the research and recommendation of innovative technologies to improve performance, resilience and scalability. Engineer solutions using enterprise blueprints and standards. Design and implement resilient architectures with disaster recovery and business continuity in mind. Work with technologies including switches, routers, firewalls, wireless platforms , SDN fabrics, load balancers, NAC and cloud networking components. Provide Tier 3 engineering support for complex incidents and escalations. Participate in a 24x7 on-call rotation as required. Produce and maintain detailed network documentation using Microsoft Visio. Maintain and continuously improve network security posture in line with regulatory frameworks including PCI-DSS, PII, CIS and NIST. Required Experience & Skills 5-7+ years of experience designing, implementing and supporting medium to large enterprise networks (10,000+ users). Palo Alto firewall platforms (Pan-OS, Threat Prevention, User-ID, GlobalProtect, HA, Prisma Access) Automation and Scripting (Python/Ansible/Terraform Strong hands-on experience with Cisco enterprise technologies . CCNP Enterprise (R&S) level knowledge required. 1-2 years' experience designing and supporting data centre spine-leaf fabrics (Cisco / Arista). Experience with Cisco DNA Center . Experience with SD-WAN technologies (Cisco, Palo Alto ION). Enterprise-scale Cisco Wireless experience (WLC, FlexConnect, CAPWAP). Desirable Experience Remote access VPN technologies. Certificate lifecycle management (Venafi, PKI). NAC solutions (Cisco ISE, Forescout). Infoblox DNS / IPAM. Cloud networking design and security principles. Network monitoring tools such as SevOne, SolarWinds, Datadog or Splunk. Knowledge of network security architecture, IDS/IPS, VPNs and SSL technologies. Network Engineer Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website