Network Engineer L3 in Gloucester

Essential Roles & Responsibilities

• Diagnose and resolve complex incidents across SDWAN, WAN, LAN/WLAN, VPN/SASE, and load-balancing platforms, ensuring compliance with financial services regulations.
• Implement network configuration changes using approved templates and security baselines, maintaining audit trails.
• Validate device configurations, firmware posture, and compliance with golden standards and sector-specific requirements.
• Support onboarding of new sites/services using Zero-Touch Provisioning (ZTP) and Infrastructure-as-Code pipelines.
• Manage routing policies, QoS, wireless performance tuning, and load balancer configuration updates.
• Collaborate with vendor management teams on escalated transport or device issues, ensuring regulatory requirements are met.
• Contribute to CMDB enrichment through topology validation and asset reconciliation.
• Support automated impact assessments and change risk analysis, with a focus on operational resilience.
• Participate in continuous service improvement (CSI) initiatives, such as monitoring optimisation and capacity analysis.
• Provide technical guidance and mentoring to Level 2 engineers.

Financial Services & Regulatory Compliance

• Ensure all network operations adhere to financial services regulations and frameworks (e.g., FCA, PRA, DORA, ISO 27001, SOC).
• Maintain documentation and audit trails for all changes, incidents, and compliance activities.
• Support risk assessments, compliance reviews, and operational audits as required.
• Integrate regulatory requirements and security controls into network designs and operations.

Governance & Reporting

• Maintain accurate incident, request, and change records in ServiceNow.
• Produce and present operational reports, dashboards, and summaries for internal and customer stakeholders, highlighting compliance, risk management, and performance.
• Support governance initiatives including process improvement, risk analysis, and post-implementation reviews.

Key Skills

• Advanced routing & switching (BGP/OSPF, ACLs, NAT).
• SDWAN technologies (e.g. Fortinet, Cisco).
• Wireless LAN operations and performance tuning.
• Familiarity with F5 or equivalent load-balancing platforms.
• Exposure to automation or scripting (Python, Terraform, Ansible).
• Strong troubleshooting and analytical skills.
• Experience with network compliance, configuration management, and infrastructure documentation.
• Familiarity with automation frameworks and CI/CD for network configuration (Python, Terraform, Ansible).

Behavioural Competencies – Organisational & Behavioural Fit

• Essential: 4+ years’ hands-on experience in network engineering, including advanced support and implementation for regulated/financial environments.
• Strong understanding of network principles, design, operational environments, and compliance requirements.
• Proven experience with complex incident resolution, change management, and performance optimisation.
• Experience with data centre network technologies, cloud and security services (Azure, AWS, Load Balancing, DNS).
• Effective under pressure; strong written and verbal communication.
• Familiarity with ITSM workflows, SDWAN/VPN concepts, and ServiceNow.
• SASE management (Fortinet / Netskope).
• Fluent written and spoken English is essential. The role requires the ability to produce audit ready documentation and communicate confidently with senior and executive level stakeholders.

Highly Desirable:

• Experience in managed service or telecom environments, especially for financial services clients.
• Hands-on provisioning/troubleshooting with Voice technologies (Avaya, Cisco Call Manager).
• Relevant certifications (CCNP, Fortinet NSE5/7, Meraki ECMS2, F5).
• Experience with SolarWinds, Infoblox, Zero-Touch Deployment, automation tools.

Critical Competencies – General Fit

• Personal Attributes: Technical leader and mentor, passionate about advanced troubleshooting and optimisation.
• Strong compliance and risk awareness, with attention to regulatory detail.

Shift & Working Pattern:

• Standard business hours, with participation in an oncall rota as required.
• Occasional weekend engineering coverage will be required, typically limited to a small number of planned weekends per year, to support business continuity, resilience testing, or disaster recovery activities.