Sr. Lead, Infra Network - Illumio

Job description

**Key responsibilities** The Senior Network Engineer is a hands-on technical expert responsible for designing, implementing, and supporting enterprise network infrastructure. This role emphasizes network segmentation and security, particularly using Illumio for micro segmentation to mitigate lateral movement threats. Define standards in place, manage the technical lifecycle of products and services and deliver change/transformation against created designs; always ensuring a smooth transition/handover to Network Operations. - Responsible for defining and documenting Network Engineering Standards - Responsible for the creation of Low-Level Design documents to meet requirements outlined in the High-Level Design - Responsible for the creation of detailed Implementation Plans and execute them over the maintenance window. - Review technical plans of Peer/Junior engineers to avoid change failures - Responsible for Procurement activities relating to build and delivery of new services (Project) - Responsible for ensuring the smooth Transition/Handover to Operations in line with agreed Operational Acceptance Process - Responsible for managing Technical Lifecycle Management for all Network Communications services - Responsible for supporting Architecture in creation and upkeep of a Delivery Roadmap for Network Engineering - Responsible for supporting the Architecture in scoping activities required to produce the High-Level Design - Responsible for supporting Architecture in undertaking Proof of Concept activities - Responsible for ensuring skillsets are relevant and up to date in order to deliver change and provide a high level of support - Responsible for providing escalation support to Operations with complex troubleshooting of Major Incidents as required - Provide on call escalation support (rota basis) and work extended hours as and when required **Core Skills Experience** - 12+ years of experience in network engineering, with strong exposure to Illumio. - Deep expertise in endpoint compliance. - Strong understanding of network protocols (802.1x), security principles, and policy enforcement. - Experience with SCCM, Windows endpoint management, and enterprise-scale deployments. - Familiarity with scripting, automation, and integration with broader security infrastructure. - Deep understanding of Illumio ASP platform and PCE Console operations. - Expertise in moving workloads from Visibility to Enforced mode, including policy creation, validation, and rollback procedures - Ability to analyze application dependencies and define segmentation policies based on observed traffic patterns. **Responsibilities** - Oversee day-to-day operations of the Illumio platforms - Manage allowlist entries, policy configurations, OS modules, and plugin integrations - Ensure visibility and control of all devices connected to the enterprise network. - Review and update policies to ensure accurate classification of devices. - Coordinate with Network Transport Engineering to implement CTASKs for policy changes - Validate policy rollouts using reporting tools like PRT Secure Connector summaries - Lead deployment of SecureConnector upgrades across desktops, laptops, and thin clients. - Collaborate with SCCM and global deployment teams for phased rollouts and post-deployment validation - Maintain rollback plans and ensure minimal business impact during upgrades - Implement least-privilege access controls and monitor for unauthorized access attempts. - Serve as a subject matter expert on NAC security trends and threat mitigation. - Work closely with Security Authority teams for application approvals and risk assessments - Provide escalation support for blocked devices and policy exceptions. - Communicate deployment plans and status updates to business partners and stakeholders. **Preferred Qualifications** - A minimum 12 years hands on experience of network solutions within a global enterprise scale organization (5,000-50,000 users) with both traditional datacenters and Cloud. - You will have considerable first-hand experience of design engineering and building resilient and scalable network solutions, ideally within finance or investment banking. - You understand network principles, global financial services business models, as well as regional compliance standards, relevant local regulations, and applicable laws - You understand the concepts of risk and compliance and how to translate these into effective network solutions. - You will have an appreciation of automation and orchestration and will have experience of scripting against an API - You have a strong understanding of Layer 2, Layer 3 Layer 4-7 network and network technologies. - You will be familiar with a variety of testing tools, networking technologies and techniques to accurately troubleshoot and resolve complex technical problems associated with the service, application and network hardware and software. **Technical Skills Experience** You will have expert knowledge and experience in several of the following areas: - Illumio - Network Routing, Switching and Network Security It is desirable and advantageous to also have knowledge and experience of the following technology platforms: - Azure Sentinel - Python - Expertise in on-boarding AI-Tools and User-Adoption **Technical Certification** You will have the following certification or demonstrable working experience: - Illumio Associate, Illumio Specialist - CCNA, CCNA Security, CCNP Routing Switching - ITILv3 foundation or higher It would be desirable and advantageous to also have certification demonstrable working experience: - Illumio Expert **Personal Attributes** - You will be highly organized and have proven ability to operate well under pressure, working to tight deadlines - You will have good problem management and customer service skills. - You will have a positive attitude and be capable of remaining positive even when under immense pressure. - You will be able to work with global t