Network Engineer in City of London

Metrea delivers effects-as-a-service to national security partners across five domains and more than a dozen mission areas—including airborne ISR, electronic warfare, secure communications, aerial refuelling, special mission aviation, aerial firefighting, and advanced simulation. Wherever we operate, we build vertically integrated full stacks of capability—designing, building, and operating turnkey solutions that let customers scale capacity while benefiting from continuous cycles of innovation. With operators and engineers under one roof, we close the gap between lab and field—what we call connecting design with effect. Metrea’s solutions are built for elegance: effective, efficient, and evolving. This approach enables our partners to do more with less and achieve outsized, asymmetric advantage against rapidly evolving threats.

This role sits within the MAME area of Platform Group IT Engineering. Responsible for the design, deployment, and operational support of IT infrastructure across Metrea's global platforms.

In this role, you will serve as a key member of our enterprise IT team, building, maintaining, and securing the network infrastructure that keeps our organization connected and mission-ready across on-premises, cloud, and hybrid environments. You will partner with the Senior Network Engineer, cybersecurity, cloud operations, and IT support teams to deliver resilient, high-performance communications—including classified environments. You will be successful if you thrive in a fast-paced, security-focused setting, take ownership of complex network challenges, and are driven by continuous improvement. This is an excellent opportunity for a hands‑on engineer looking to grow professionally while making a direct impact on the availability, security, and performance of critical network systems.

What You’ll Do

• Design, deploy, and maintain enterprise network infrastructure—routers, switches, firewalls, and wireless access points—across classified and unclassified environments.
• Configure and optimize LAN, WAN, WLAN, SD‑WAN, and VPN solutions using platforms such as Cisco, Aruba, and Palo Alto.
• Implement and enforce network security controls including firewall policies, ACLs, IDS/IPS, NAC, and network segmentation aligned with NIST, CMMC, ISO 27001, and Cyber Essentials frameworks.
• Support cloud and hybrid network connectivity across AWS and Azure, including VNETs, VPCs, VPN gateways, ExpressRoute, and Direct Connect.
• Deploy and manage enterprise wireless networks—access points, controllers, SSID/VLAN configuration, WPA3/802.1X security, and RADIUS integration.
• Perform Tier 2/3 troubleshooting, root-cause analysis, and incident response to maintain 99.99% network uptime.
• Monitor network health and security posture using tools such as SolarWinds, Netwatch, SNMP, NetFlow, Wireshark, and SIEM platforms.
• Execute change‑management activities including firmware upgrades, patch management, VLAN provisioning, and routing updates.
• Create and maintain network documentation: runbooks, SOPs, network diagrams, device inventories, and post‑incident reports.
• Collaborate cross‑functionally with Systems Administration, DevOps, Security, and the SOC; coordinate with vendors on hardware/software issues.

What You’ll Bring

• 5–8 years of hands‑on experience in network engineering or administration supporting multi‑site enterprise environments (500+ endpoints).
• Strong command of TCP/IP, OSI model, routing protocols (BGP, OSPF, EIGRP), and switching technologies (VLANs, STP, VxLAN).
• Demonstrated experience with Cisco (Catalyst, Nexus) and/or Aruba enterprise networking platforms.
• Working knowledge of Palo Alto firewalls or equivalent enterprise firewall solutions.
• Solid understanding of VPN technologies (IPSec, SSL/TLS), DNS, DHCP, IPAM, and core network services.
• Experience with network monitoring, logging, and analysis tools (SNMP, NetFlow, syslog, Wireshark).
• Familiarity with wireless networking technologies (802.11ax/Wi‑Fi 6, controller‑based architectures).
• Foundational understanding of cloud networking concepts (Azure VNETs, AWS VPCs, security groups, route tables).

Additional Eligibility Qualifications

• CCNP Enterprise or equivalent advanced networking certification.
• Experience with defence cybersecurity regulations (NIST 800‑171, CMMC, ISO 27001, ITAR).
• Hands‑on experience with Software‑Defined Networking (SDN) or SD‑WAN platforms.
• Familiarity with Zero Trust Network Architecture (ZTNA) principles.
• Network automation and scripting skills (Python, Ansible, PowerShell).
• Experience with Azure ExpressRoute or AWS Direct Connect implementations.
• Ability to obtain security clearance required.

Benefits

• Private Medical Insurance
• Subsidised gym membership/plans through Wellhub
• Electric Car scheme
• Cycle to work scheme
• Salary‑sacrificed pension scheme
• Free lunch on office days
• Enhanced Parental Leave
• 30 days annual PTO plus bank holidays
• Bonus Scheme
• Personal development opportunities

Right to Work

The employee will have the legal right to work in the United Kingdom and will be able to produce the right to work documentation.

Equal Opportunities Statement

Metrea Management Limited (MAM) is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or other characteristics protected by law.

Position Type and Expected Hours of Work

This is a full‑time non‑exempt position with typical working hours of Monday through Friday, 9:00 a.m. to 6:00 p.m. Hours and work shifts may change in accordance with department and business needs. Exempt Employees must have the ability to be on‑call and available, as business needs require. Non‑Exempt employees may be required to work over 40 hours per week with approval from the department manager.

Work Location

London UK

Work Environment

Hybrid; minimum of 3 days/week onsite – London, UK

Travel

Travelling is required.