Technical Design Authority– Secure Networks in Wakefield

Role-Technical Design Authority– Secure Networks

Location-Home based with travel to customer sites/team meetings when required

Salary-Negotiable

Why this role exists

We\’re expanding to deliver a wave of customer network transformations. The TDA is our post-sales technical lead and trusted advisor, responsible for shaping and delivering robust designs, guiding customers through SD-WAN and SASE adoption, and ensuring implementations land cleanly into service.

You\’ll be hands-on enough to own Low Level Design and Migration Runbooks and cut-through on complex problems, yet customer centric enough to build confidence, challenge constructively, and become \’first call\’ for strategic technical decisions.

Experience we\’re looking for

• Track record delivering multi-site SD-WAN/SASE transformations as the lead designer/authority.

• Evidenced \’trusted advisor\’ relationships with enterprise or public-sector customers.

• Hands-on with Fortinet SD-WAN/SASE/ ZTNA in production, including policy design and troubleshooting.

• Comfortable guiding engineers and challenging scope/assumptions to keep delivery on track.

Key Responsibilities

What you\’ll do

• Own solution design: Produce high-quality High-Level and Low-Level Designs for SDWAN, Secure SD-Branch and SASE, integrating NGFW, ZTNA, and Cloud-connect, aligned to customer outcomes and delivery constraints.

• Lead delivery technically: Act as Design Authority across project phases, providing technical governance, standards, and \’go/no-go\’ on design changes; assure quality of build, test and service transition artefacts.

• Be the trusted advisor: Run customer workshops, translate business drivers into technical decisions, challenge assumptions, and guide stakeholders through risk/benefit trade-offs for transformation programmes.

• Close the loop with pre-sales: Review RFPs/RFIs and proposed architectures, contributing design options, scope assumptions, and delivery estimates that can be sold and delivered on time and within budget.

• Harden security posture: Define and validate SASE/Zero-Trust policies, ZTNA access models, identity-aware segmentation, and secure site templates; align with Nasstar security frameworks and customer policies.

• Operational handover: Ensure designs are operable: documentation, config standards, test plans, knowledge transfer and run-books to transition smoothly into support.

• Continuous improvement: Capture lessons learned, contribute to design standards, templates and automation; mentor engineers and influence productised delivery patterns for SD-WAN/SASE.

Skills, Knowledge and Expertise

Core technical skills

• Fortinet SD-WAN & SASE: FortiGate (physical/VM), FortiManager/FortiAnalyzer, SD-WAN overlays, performance-based routing, segmentation; SASE policy definition; ZTNA (client and gateway).

• Routing & overlays: BGP, OSPF, IPsec, GRE; dual-underlay/dual-hub; DIA/MPLS migrations.

• Firewalling & security: NGFW policies, IDS/IPS, SSL inspection, cert chains and device PKI hygiene; Zero-Trust principles and identity-aware access.

• LAN/WAN & Wi-Fi: Campus/branch designs, SD-Branch, switching/wireless patterns and site standards.

• Cloud & edge: Private DC, interconnect, cloud on-ramps; design guardrails for resilience and failover.

Professional skills

• Customer-centric communicator who can translate business constraints into clear technical decisions and articulate risk/impact in plain English.

• Pragmatic, delivery-minded: balances \’strategic ideal\’ vs. \’tactical path\’ to meet timelines and budgets.

• Comfortable chairing design workshops and Design Authority forums, documenting outcomes and holding teams to standards

Nice to have

• Operational Technology (OT) Security: Exposure to OT network segmentation, asset zoning (ISA/IEC 62443 concepts), secure remote access for plant or retail edge, and constrained-environment change practices.

• Broader vendor familiarity (Cisco/Meraki/Juniper) to read/critique designs and handle heterogeneous estates.

Certifications (preferred)

• Fortinet NSE 4–7 (or progress toward).

• Cisco/Juniper routing certs helpful (CCNP, JNCIS/JNCIP).

• Security certs a plus (e.g. CISSP, GIAC) and any exposure to ISA/IEC 62443 for OT.

Benefits

At Nasstar, we know the importance of looking after our employees – after all, it\’s the team that underpins our business!

In addition to a competitive salary, supportive teams, and a real opportunity to progress in your career with a forward-thinking organisation, our benefits package includes:

• 25 days\’ holiday (excluding bank holidays) + Your Birthday Off
• Flexible working – it\’s important to maintain a work/life balance, as such, we will consider any written request for flexible working
• Virtual working – we practice what we preach and empower our people to work remotely
• Top tech – Leading services and solutions aren\’t just for our clients; we supply best-of-breed software and hardware for all our staff too
• 4x annual salary life assurance
• Health cash plan
• Retail discounts and other perks from major brands