Network Operations Engineer

Role Purpose: The Network Operations Engineer is responsible for the design, implementation, configuration, monitoring, and support of network and connectivity services across client and internal environments. This is a hands‑on technical role combining day‑to‑day operational management with project delivery, ensuring SysGroup's network infrastructure is secure, reliable, and continuously improving.

• Monitor network infrastructure and connectivity services to ensure high availability and performance.
• Respond to alerts and incidents affecting network services.
• Maintain operational oversight of managed network platforms including WAN, LAN, and wireless.
• Use network monitoring platforms (e.g. Nagios, PRTG, Meraki Dashboard) to maintain service health.
• Deliver end-to‑end network projects including WAN provisioning, LAN and wireless deployment, and firewall configuration.
• Build and configure routers, firewalls, switches, and access points based on approved HLTDs/LLTDs and governance standards.
• Coordinate with ISPs, carriers, and vendors for circuit activation, hardware delivery, and configuration validation.
• Conduct testing, cutover, and post‑deployment verification to ensure stability and service readiness.
• Manage change windows and implementation plans, including rollback and communication procedures.
• Investigate and resolve network incidents and service disruptions.
• Perform root cause analysis for recurring network problems and feed improvement recommendations back to design and architecture.
• Act as a 3rd‑line escalation point for complex connectivity issues when not engaged in project delivery.
• Escalate unresolved or critical issues appropriately within the support chain.
• Configure and maintain networking components including routers, switches, firewalls, and connectivity services.
• Manage WAN, LAN, and VPN connections across client environments.
• Support the onboarding of new clients to managed network services.
• Assist with network upgrades, configuration changes, and platform improvements.
• Support the secure configuration of network infrastructure including firewall policies, VPN, and access controls.
• Work with the cyber security team to ensure network security best practices are maintained.
• Monitor network environments for potential security risks and vulnerabilities.
• Produce comprehensive handover documentation including topology diagrams, configuration exports, and monitoring templates.
• Deliver knowledge transfer sessions and technical briefings to Service Engineers.
• Ensure all configurations are labelled, version‑controlled, and recorded in the CMDB.
• Update internal templates and SOPs to reflect lessons learned from project execution.
• Work closely with the Connectivity Architect to ensure all deployments align with SysGroup's design standards and security posture.
• Support infrastructure, cloud, and platform teams with networking expertise.
• Participate in internal QA reviews and continuous improvement cycles.
• Provide feedback on design practicalities and propose operational optimisations.
• Identify opportunities to improve monitoring, automation, and operational efficiency.
• Contribute to improving the reliability and resilience of network services.
• Contribute to improvements in network operational procedures and standards.
• 4–6 years' experience managing enterprise or managed network infrastructure, ideally within an MSP environment.
• Proven track record in both operational network management and project-based delivery.
• Experience working with connectivity providers and networking vendors.
• Ability to work in operational environments supporting client infrastructure.
• Strong understanding of networking principles including routing, switching, and secure connectivity.
• Firewalls – Cisco, Meraki, or WatchGuard (policy creation, VPNs, NAT, HA setup).
• Routing & Switching – VLANs, spanning tree, QoS, routing protocols (OSPF, BGP), trunking, and redundancy.
• WAN & ISP Coordination – circuit provisioning, handover testing, and vendor escalation.
• Wireless – AP deployment, SSID configuration, controller management, and coverage validation.
• Network monitoring and diagnostic tools (Nagios, PRTG, Meraki Dashboard, or equivalent).
• Comfortable producing network documentation and topology diagrams.
• Knowledge of change management processes and ITIL service transitions.
• Scripting or automation exposure (Python, Ansible, PowerShell) is advantageous.
• Exposure to SASE/SSE platforms (e.g. Zscaler ZIA/ZPA, Netskope, Palo Alto Prisma Access) and how they integrate with traditional WAN and firewall estates.
• Understanding of Zero Trust Network Access (ZTNA) principles and experience supporting migration away from legacy VPN and perimeter-based access.
• Familiarity with SD-WAN security overlays and secure application segmentation for distributed client environments.
• Awareness of identity‑aware networking, integrating connectivity with identity providers (Entra ID, Okta) for policy‑based access decisions.
• Vendor certifications such as Zscaler ZCCA/ZCCP, Palo Alto PCNSE, or equivalent SASE/SSE credentials.

Joining Sysgroup means becoming part of a dynamic and innovative team that is dedicated to excellence. We offer a supportive, and collaborative work environment, where your ideas and contributions are valued. Here are some of the benefits of working with us:

Competitive Compensation

We offer a competitive salary package, including performance‑based incentives, to reward your hard work and achievements.

• Private Healthcare
• Life insurance
• Pension

We believe in investing in our employees' professional development. You will have your own individual development learning paths with access to various training material and ongoing career advancement opportunities.