IP Network Engineer

• Build, configure, and maintain Stacuity's global network across routing, switching, and firewall infrastructure, working closely with our architecture function and contributing to network designs as well as implementing them
• Carry out day-to-day operational tasks across our WAN, LAN, and Internet edge, including routing changes, firewall rule changes, and segmentation updates
• Apply and follow network standards covering routing, IP addressing, DNS, NAT, and firewall zoning, flagging gaps or improvements where you spot them
• Support the lifecycle management of network hardware and software, including patching, firmware updates, and end-of-life replacement
• Act as a frontline responder for network incidents, carrying out initial investigation, troubleshooting, and remediation under time pressure
• Diagnose and resolve issues across routing, switching, firewalls, and connected systems, escalating to the architecture team where a design change is needed
• Monitor network health and performance, using observability tooling to spot issues before they become outages
• Contribute to root-cause analysis and write up clear, accurate incident notes to support post-incident review
• Pick up adjacent systems work as needed, such as server management, hypervisor and virtualisation tasks, and general Linux administration
• Work closely with the architecture, platform, and security teams, feeding back practical, on-the-ground experience into future designs and standards
• Support our ISO 27001 information security programme by following and helping maintain the network controls that fall within Annex A
• Keep clear, accurate documentation of network configuration, changes, and known issues for the rest of the team to rely on

• Minimum CCNA level (or equivalent) across major enterprise networking vendors - Essential
• Degree (or equivalent) in Computer Science, Network Engineering, or a related discipline - Desirable (or demonstrable practical experience)
• CCNP level (or equivalent) - Desirable (or working towards it)
• Excellent written and spoken English - Essential
• Strong, practical understanding of high-availability and failover principles at both Layer 2 and Layer 3, gained through hands-on work on ISP or enterprise routing, switching, and firewalls
• Deep, practical expertise in IP routing at scale, including BGP (iBGP and eBGP) and IS-IS, along with hands-on experience managing external peering and transit relationships
• Solid experience with tunnelling technologies such as GRE and VXLAN, and Layer 2 networking including HSRP/VRRP/VARP, VLANs and trunking, STP, and ARP/NDP
• Working knowledge of VPN technologies and IPsec, and a security-conscious approach to network design including ACLs and IDS/IDP
• Hands-on firewall configuration and management experience, including with virtualised firewalls such as pfSense, and exposure to next-generation firewall platforms such as Palo Alto, Fortinet, or Checkpoint
• Hands-on configuration and troubleshooting experience across major networking vendors, with particular depth in Cisco ASR platforms (IOS-XE) and Cisco Nexus platforms (NX-OS)
• broader exposure to Juniper, HP, and Arista is also valued
• Experience with SD-WAN and interconnection fabrics, such as Equinix Fabric, Console Connect, or similar platforms
• Comfortable working with hypervisors and virtualisation, particularly Proxmox, along with SR-IOV and virtual functions (VFs)
• Confident HPE server management, and solid Linux administration skills (Ubuntu)
• familiarity with FreeBSD is an advantage
• A flexible, willing approach to general systems work beyond pure networking, such as basic server builds, storage, or scripting, when it helps get a job done
• Experience with monitoring and observability tooling, such as Prometheus and Grafana, to support proactive network health and performance management
• Comfortable producing clear, accurate technical documentation, such as configuration records, runbooks, and change notes, for day-to-day operational use
• Strong problem investigation, troubleshooting, and resolution skills, able to work through technical issues methodically, including under pressure during live incidents
• Ability to communicate technical issues and progress clearly to colleagues and, where needed, to non-technical stakeholders
• Exposure to cloud networking, such as AWS, Microsoft Azure, or hybrid cloud environments (desirable)
• Awareness of mobile core and mobile network concepts is an advantage, but not a prerequisite – we will support you in building this context
• Hands-on, craft-focused mindset – genuinely enjoys getting into the detail of routing, switching, and firewall configuration, and takes pride in doing it properly - Essential
• Strong analytical thinking – approaches problems logically and is comfortable working through ambiguity - Essential
• Clear communicator – able to explain a technical issue or a piece of work clearly to colleagues, and to non-technical people when needed - Essential
• Collaborative by nature – works well alongside other engineers and the architecture and platform teams, and is comfortable asking for help or input - Essential
• Ownership mentality – takes responsibility for the tasks and incidents in front of them and follows through to a proper resolution, including being there when things go wrong - Essential
• Curious and proactive – interested in how platforms and systems work end-to-end, and always looking to improve - Essential
• Continuous improvement mindset – consistently looks for ways to make the network more resilient, more efficient, and easier to operate Essential
• Values aligned with Stacuity's culture – ambitious, innovative, dependable, and supportive - Essential
• Able to work flexible hours when required to meet the needs of the role - Essential
• Willing to undertake a DBS check - Essential
• Right to work in the Isle of Man or UK (visa sponsorship may be considered for exceptional candidates) - Essential
• IOM Worker - Desirable

• Exposure to cloud networking, such as AWS, Microsoft Azure, or hybrid cloud environments
• Awareness of mobile core and mobile network concepts
• Familiarity with FreeBSD
• IOM Worker

Compensated on-call rota