Network Architect

The role of a Network Architect is to design, implement, and maintain a robust network infrastructure. This includes deploying, configuring, and maintaining firewalls, switching, and Wi-Fi technologies.

The ideal candidate will have hands-on experience with Fortinet firewalls, SD-WAN, switching, and wireless networks. They should also be proficient in routing protocols, security best practices, and wireless design principles.

A strong analytical and problem-solving capability, as well as the ability to communicate complex technical concepts to non-technical stakeholders, is essential for this position.

This role offers opportunities for professional growth and development, as well as a collaborative work environment.

• Network Infrastructure Management & Support:
  • Deploy, configure, and maintain Fortinet firewalls, including NGFW services, IPS, application control, web filtering, SSL/IPsec VPNs, and SD-WAN routing.
  • Administer enterprise switching, managing VLANs, Layer 2/3 routing, QoS, and stack management.
  • Manage wireless networks using Fortinet FortiWLC/FortiAP and Cambium controllers/APs, ensuring reliable coverage, roaming optimization, and WPA3/802.1X security.
  • Oversee WAN connectivity (Internet, SD-WAN, MPLS) and ISP relationships, ensuring sufficient bandwidth, redundancy, and fail-over capability.
  • Maintain accurate network diagrams and asset inventories using industry-standard tooling (e.g., NetBox or equivalent).
  • Security & Compliance:
    • Own firewall rule-sets, security profiles, and threat-intelligence subscriptions across all Fortinet appliances.
    • Integrate network telemetry and security logs into Microsoft Sentinel SIEM, developing analytic rules, workbooks, and incident response playbooks.
    • Implement network segmentation, Zero Trust, NAC (e.g., FortiNAC) and MFA for administrative access to networking devices.
    • Coordinate regular vulnerability assessments and patching for network hardware and firmware.
    • Monitoring & Performance Management:
      • Establish and maintain end-to-end monitoring using FortiManager/FortiAnalyzer and complementary NMS tools (e.g., PRTG, LibreNMS, SolarWinds).
      • Develop dashboards and automated alerts for latency, packet-loss, throughput, Wi-Fi health, and security events.
      • Produce monthly KPI and capacity reports, recommending upgrades or configuration changes where required.
      • Operational Support & Troubleshooting:
        • Provide Tier-3 escalation support for network-related incidents and service requests, including root-cause analysis and post-incident reviews.
        • Participate in the on-call rotation for critical network and security incidents.
        • Coordinate maintenance windows, change requests, and communication with stakeholders.
        • Automation & Optimisation:
          • Automate configuration deployment, backups, and compliance checks using scripting (Python, PowerShell), REST APIs, and tools such as Ansible or Terraform.
          • Champion Infrastructure as Code (IaC) approaches for network templates and SD-WAN policy deployment.
          • Drive continual service improvements, identifying opportunities to reduce complexity and cost.
          • Collaboration & Documentation:
            • Work closely with infrastructure, security, and application teams to ensure networking requirements align with wider IT initiatives.
            • Produce and maintain clear documentation: network standards, change records, troubleshooting guides, and knowledge base articles.
            • Provide mentoring and knowledge transfer to IT colleagues on basic network administration tasks.
          Requirements
          

We are looking for an experienced Network Architect who has:

• At least 3 years of hands-on network engineering experience in a multi-site environment.
• Demonstrated expertise with Fortinet firewalls, SD-WAN, switching, and wireless networks.
• Experience integrating log sources and building detections in Microsoft Sentinel or similar SIEM platforms.
• Proficiency with routing protocols (OSPF, BGP), network security best practices, and wireless design principles.
• Exposure to automation (Python/Ansible) and Infrastructure as Code workflows.

A strong analytical and problem-solving capability, as well as excellent communication skills, is essential for this position.

If you are a motivated and detail-oriented individual who is passionate about network engineering, we encourage you to apply.