网络工程师

#### Company Description

**Sectigo** is the most innovative provider of certificate lifecycle management (CLM), delivering solutions that help the world’s largest brands simplify how digital trust is managed and scaled. Sectigo’s automated, cloud-native CLM platform issues and manages digital certificates across enterprise environments, enabling organizations to reduce complexity, accelerate time to value, and strengthen security across environments. Sectigo is one of the largest, longest-standing, and most reputable CAs with more than 700,000 customers, including 65% of the Fortune 500. Sectigo holds six combined active leadership seats in the CA/Browser Forum and ETSI and brings two decades of delivering unparalleled digital trust.

**Simplicity at Scale.**

How we show up with each other and our customers every day is just as important, and we win as #OneSectigo by living out our core values - Support, Excellence, Communication, Teamwork, Integrity, Growth and Openness. We are committed to investing in our diverse teams where everyone understands their role and how they support our strategic goals, we drive operational excellence through scale and efficiency, and we strive to delight our customers and become the market leader in our industry. If you aspire to join a driven team that holds each other accountable to meeting our lofty goals and you’d like to be part of our growth story in delivering a market leading user experience, we’d like to talk to you.

#### Job Description

We are looking for a talented Network Engineer to join our growing global team at Sectigo.

The Network Engineer is responsible for supporting, implementing, managing, and maintaining the organization's networking infrastructure. This individual is detail-oriented, thrives in a fast-paced, dynamic environment, and possesses a proven track record in learning, implementing, and maintaining enterprise networks and new technologies. Must be a commutable distance to Manchester DC, should the need arise.

Here are the core functions, responsibilities, and expectations for this role:

- Network: Designing, planning, and implementing network infrastructure move, add, or changes. Including maintenance and support.
- Network Security: Implementing and maintaining network security protocols, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, access control lists (ACLs), and encryption technologies to safeguard the organization's data and systems.
- Network Troubleshooting and Optimization: Diagnosing and resolving complex network issues, analyzing network performance, and optimizing network infrastructure to ensure high availability, reliability, and performance.
- Documentation and Reporting: Creating and maintaining network documentation, diagrams, and standard operating procedures (SOPs). Generating reports on network performance, security incidents, and compliance status for management review.
- Capacity Planning: Assessing current and future network capacity requirements based on business growth projections and technology trends. Planning and implementing scalability solutions to accommodate increasing demand.
- Regulatory Compliance: Ensuring network infrastructure compliance with industry regulations, standards, and best practices (e.g., PCI DSS, HIPAA, GDPR, ISO, Webtrust). Conducting audits and implementing remediation measures as needed.
- Mounting and Installation: Ability to mount and install network devices such as routers, switches, and servers in data centers and office locations. This includes rack mounting, cable management, and hardware configuration. Candidates must be able to lift network equipment weighing up to 50 lbs.
- Travel & Operational Requirements:
- Participate in on-call rotation.
- Travel both internationally and nationally as needed (site support meetings, projects, etc.).
- Frequent visits to Datacenter near Manchester.
- Additional tasks associated with this position may be assigned in response to company initiatives and business needs.

More information about this role:

- This is a full-time and remote position based in U.K., with the ideal candidate reside within 1-hour driving distance to the greater Manchester area.
- The targeted compensation package for this role is between GBP 55,000 and 62,000 per annum, subject upon internal equity and years of experience.  We may make further adjustments through an approval process if the targeted compensation range needs to be modified based on business needs and market trends.

#### Qualifications

**Education:**

- Bachelor’s degree in computer science, information technology, or related field is strongly preferred.  Relevant certifications (e.g., CCNP, CCIE, CISSP) are a plus.

**Experience:**

- Proven experience (typically 5+ years) in network engineering roles, with a focus on supporting, implementing, and managing enterprise-scale network infrastructures.
- Automation and Infrastructure as Code (IAC):
- Ability to create, implement, and maintain automation using Terraform and Ansible.
- Proficiency with GIT.
- Comfortable with JSON, YAML, and XML.
- Knowledge of Python is a plus.
- Cloud Environments:
- AWS network experience is necessary (TGWs, Network ACLs, AWS Network Firewall, Security Groups, VPCs, Subnet,etc..), and general experience is required.
- Must be proficient in installing, implementing, supporting, and maintaining Juniper, Palo Alto, and Arista hardware and software for Datacenter and Campus environments.
- Knowledge of SD-WAN technologies such as Palo Alto, Aruba/Silverpeak, or Cisco/Viptela is a plus.
- Site to Site VPN: Must be able to design, implement, and support Route based and Policy based VPN. Knowledge of specific technologies such as DMVPN, FlexVPN, and other vendor-specific VPNs is a plus.
- RA VPN: Must be able to design, implement, and support enterprise VPNs such as Global Protect or AnyConnect.
- VXLAN: Understanding of overlay vs underlay and how it interacts with EVPN
- AAA: Must be able to support, implement, and maintain Radius and Tacacs+ for both device access management and NAC (e.g., 802.1x). SAML-based authentication is a plus.
- Network Monitoring: Must be able to implement, support, and use: Netflow, SNMP, and related enterprise tools (e.g., Solarwinds, Nagios, LiveNX).
- FW Technologies and Traffic Flow: Must understand stateful vs non-stateful rules, symmetric vs non-symmetric, NAT types, order of operation, etc.
- L3 Routing Protocols: Must have knowledge of OSPFv2, OSPFv3 and BGP. Knowledge of others such as ISIS and mBGP is a plus.
- L3: Must know IPv6. IPv4 and IPv6 dual stack is a plus.
- Layer 2: Must understand rSTP, dot1q, vlan, L2 security
- Wireless: Good understanding wireless, roaming, troubleshooting
- HA: Must understand FHRP (VRRP, HSRP, etc.), LACP, BFD, switch stacks.etc.
- TCP/IP: Must understand path MTU discovery (ICMP), basic TCP flags, etc.
- DNS, DHCP, ARP, Neighbor Discovery: Must have a good understanding.
- Segment Packet Frame troubleshooting: Must be comfortable packet captures and utilizing tools like Wireshark and tcpdump.

**Ideal Candidate Profiles, Talents, and Desired Qualifications:**

- In-depth knowledge of networking protocols and technologies, including TCP/IP, VLANs, OSPF, BGP, MPLS, VPNs, DNS, DHCP, SNMP, etc.
- Strong understanding of network security principles and best practices, including firewall configuration, intrusion detection/prevention, encryption, and secure remote access.
- Proficiency in network hardware and software, such as Arista, Cisco, Juniper, Palo Alto, Fortinet, Aruba, etc. Experience with SDN, SD-WAN, and cloud networking is desirable.
- Excellent analytical, problem-solving, and troubleshooting skills, with the ability to diagnose and resolve complex network issues.
- Effective communication and interpersonal skills, with the ability to collaborate with cross-functional teams, articulate technical concepts to non-technical stakeholders, and mentor junior staff.
- Attention to detail, organization, and documentation skills, with a commitment to maintaining accurate network documentation and following standard procedures.
- Adaptability and willingness to learn new technologies, methodologies, and tools to keep pace with evolving business needs and industry trends.

#### Additional Information

**Sectigo is an Equal Opportunity Employer.**

At Sectigo, we are committed to providing equal opportunities throughout your career. We hire and promote the most qualified individuals based on their skills, experience, job requirements, and business needs. We do not discriminate on the basis of race, color, religion, age, sex, national origin, disability, pregnancy, genetic information, veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable laws in the countries where we operate.

Our “One Sectigo” culture fosters a strong sense of belonging and supports a respectful, inclusive workplace free from discrimination and harassment.

**Use of Artificial Intelligence (AI) in Our Hiring Process at Sectigo:**

To enhance your experience, Sectigo may use Artificial Intelligence (AI) tools during the recruitment process. We are committed to using AI responsibly and transparently, ensuring fairness, accuracy, and human oversight at every stage.

**Global team. Global reach. Global impact.**

At Sectigo, we believe doing good is good business. Our strength and our success come from our team of passionate, engaged individuals who make a difference, both locally and globally. Our commitment to engagement is rooted in an unconditionally inclusive workforce, embodying our unique perspectives, heritages, and backgrounds, all as diverse as the experiences of each Sectigo employee. Importantly, we strive to be recognized not only as the CLM leader but also for our intentional efforts to promote employees into the roles that most challenge and excite them, into experiences that allow them to grow their interests as we grow the business. We are committed to bringing a little bit of fun and a whole lot of happiness into everything we do so that our work – and our team members – reflect the positive outcomes we deliver to our customers every day.