Network Service Delivery Engineer

We are seeking a visionary and highly technical Network Service Delivery Engineer to help with the design, evolution, and governance of NESO' network infrastructure. While our Network Engineers focus on implementation and operations, this role will help define the blueprint they build from.

You will bridge the gap between business strategy and technical execution, architecting scalable, automated, and secure network solutions across LAN, WAN (including SD-WAN), cloud (AWS/Azure), and data center environments. You will drive the adoption of Network DevOps and Infrastructure as Code principles at an architectural level, partnering with our MSP, ensuring our network is not just stable, but programmable and resilient.

This role requires a deep understanding of both traditional networking and modern automation paradigms, mentoring engineering teams, and providing technical direction to senior management.

Define and govern the overarching architectural framework for NESO’s network, including LAN, WAN (with SD-WAN), cloud platforms (AWS/Azure), and data center environments.

Translate business objectives into actionable network designs, establishing clear architectural standards, roadmaps, and best practices.

Network Principal scalable, automated, and secure network solutions that underpin NESO’s operational and strategic ambitions.

Collaborate closely with cloud, infrastructure, and application teams, as well as external partners, to integrate network architectures seamlessly across hybrid and cloud environments.

Drive the adoption of Network DevOps and Infrastructure as Code principles, enhancing the programmability, efficiency, and resilience of network operations.

Mentor and guide engineering teams, provide technical leadership and foster a culture of continuous learning and professional growth.

Serve as a technical authority, advising stakeholders on network architecture, emerging technologies, and industry best practices.

This role can be based from Wokingham or Warwick and we continue to offer hybrid working from office and home. We are open to full time and part time applicants, as well as flexible working arrangements.

This role is designated as requiring a National Security Vetting (NSV) clearance. You will usually need to have been a resident in the UK for the last five years to apply for the required level of clearance.

Own the end-to-end network security architecture for NESO, ensuring robust protection across on-premises, cloud, and hybrid environments.

Design, document, and govern secure network segmentation strategies, including Zero Trust models, next-generation firewall frameworks, and secure connectivity solutions such as Direct Connect, and Transit Gateway currently delivered by ZScaler

Help Develop and maintain a comprehensive 12–24 month technology roadmap for network security, prioritizing automation, orchestration, and integration with the NESO Digital Strategic ecosystem to enhance operational efficiency and resilience.

Define, publish, and enforce enterprise-wide network security standards, conducting regular architectural reviews to ensure alignment with business objectives, regulatory requirements, and industry best practices.

Serve as the highest escalation point for complex network security incidents, analyzing network packet captures and logs to design and implement permanent solutions that address root causes and strengthen the overall security posture.

Continuously research emerging network security threats, vulnerabilities, and industry trends, recommending architectural innovations to proactively address evolving risks.

Design and review cloud security architectures, collaborating with cloud teams to ensure secure integration and governance across public, private, and hybrid cloud platforms.

Provide technical mentorship and guidance to engineering and operations teams, promoting professional growth, knowledge sharing, and adherence to NESO’s network security vision and standards.

Applicants must have the right to work in the UK by the start of employment. Visa sponsorship may not be available for this role and will be considered in line with business requirements.

Significant demonstrable experience in network engineering, with extensive hands-on experience in a dedicated Network Principal or Lead role designing global, enterprise-scale networks.

Proven ability to see the "big picture" and design holistic solutions that balance performance, security, cost, and automation. You don't just configure switches; you design the fabric they operate within.

Expert-Level Technical Knowledge: Deep expertise in routing and switching protocols (BGP, OSPF, VXLAN, MPLS) and network fundamentals (TCP/IP, UDP, DNS, DHCP). Advanced knowledge of enterprise network stacks: Cisco (routers/switches/WiFi), Firewalls, load balancers (F5/others), and SD-WAN technologies. Strong understanding of Cloud Networking in AWS/Azure (VPCs, Transit Gateway, PrivateLink, Direct Connect, Security Groups, NAT, Cloud WAN). Mastery of network monitoring, observability, and IPAM tools at scale.

Deep expertise in routing and switching protocols (BGP, OSPF, VXLAN, MPLS) and network fundamentals (TCP/IP, UDP, DNS, DHCP).

Advanced knowledge of enterprise network stacks: Cisco (routers/switches/WiFi), Firewalls, load balancers (F5/others), and SD-WAN technologies.

Strong understanding of Cloud Networking in AWS/Azure (VPCs, Transit Gateway, PrivateLink, Direct Connect, Security Groups, NAT, Cloud WAN).

Mastery of network monitoring, observability, and IPAM tools at scale.

Expert knowledge of enterprise LAN, WAN, SD-WAN, Data Centre, Internet Edge, Cloud Networking and Network Security architectures.

Deep understanding of network segmentation, Zero Trust architectures, Software Defined Networking (SDN), micro-segmentation, and secure service access solutions.

Experience designing highly resilient network architectures across multiple data centres, cloud platforms, and critical national infrastructure environments.

Experience designing resilient internet connectivity solutions including dual ISP connectivity, provider independent addressing, DDoS protection, and high availability networking.

Proven ability to identify, establish and drive opportunities for automation across network operations, service delivery, security, compliance, and infrastructure management.

Experience developing strategic automation roadmaps that reduce operational overhead, improve service quality, minimise human error and increase delivery velocity.

Strong understanding of Network Automation frameworks including: Python, Ansible, Terraform, GitOps, REST APIs, NETCONF, YAML, Infrastructure as Code (IaC)

Python, Ansible, Terraform, GitOps, REST APIs, NETCONF, YAML, Infrastructure as Code (IaC)

Experience implementing automated: Device provisioning, Configuration management, Compliance verification, Policy deployment, Security remediation, Certificate management, Software lifecycle management, Capacity reporting, Service health monitoring

Device provisioning, Configuration management, Compliance verification, Policy deployment, Security remediation, Certificate management, Software lifecycle management, Capacity reporting, Service health monitoring

Exceptional ability to create clear architectural diagrams (Visio/Lucid) and presentations for consumption by engineering teams, peers, and senior management. You can explain a BGP path selection issue to an engineer and a business risk to a director.

Deep understanding of ITIL concepts within an Agile, process-driven environment. A "no-blame" mindset focused on continuous improvement and preventing future incidents through architectural automation. Highly self-motivated with a passion for learning.

Experience integrating network infrastructure into CI/CD pipelines, enabling automated testing, validation and deployment of network changes.

Ability to establish self-service operational capabilities through automation and orchestration platforms.

Experience leveraging Artificial Intelligence for IT Operations (AIOps) to proactively identify risks, automate remediation activities and reduce service outages.

Understanding of automated network assurance platforms, digital experience monitoring, telemetry collection, and closed-loop remediation capabilities.

Experience with enterprise monitoring and observability strategies using telemetry, flow analytics, packet analysis and performance monitoring.

Ability to leverage operational data for predictive analysis, trend identification, capacity forecasting and service optimisation.

Experience implementing automated compliance reporting and governance controls supporting NIS, CAF, ISO27001 and audit requirements.

Expert understanding of enterprise wireless networking technologies including Wi-Fi 5, Wi-Fi 6, Wi-Fi 6E and Wi-Fi 7.

Experience designing, governing and optimising large-scale wireless deployments across corporate, operational and critical-site environments.

Deep understanding of: RF design and optimisation, Wireless security, NAC integration, Client roaming, Location services, Spectrum management, High-density deployments

RF design and optimisation, Wireless security, NAC integration, Client roaming, Location services, Spectrum management, High-density deployments

Experience developing wireless strategies supporting modern collaboration technologies, hybrid working, operational technology and IoT integration.

Knowledge of Wi-Fi 7 advancements including: Multi-Link Operation (MLO), 320 MHz channel support, Enhanced throughput, Reduced latency, Improved client performance, Enhanced reliability

Multi-Link Operation (MLO), 320 MHz channel support, Enhanced throughput, Reduced latency, Improved client performance, Enhanced reliability

Experience evaluating and implementing self-healing network technologies and AI-assisted operational capabilities.

Understanding of platforms capable of: Automated fault detection, Root cause analysis, Dynamic RF optimisation, Automated channel selection, Automated power adjustments, Client steering, Service assurance automation, Network anomaly detection

Automated fault detection, Root cause analysis, Dynamic RF optimisation, Automated channel selection, Automated power adjustments, Client steering, Service assurance automation, Network anomaly detection

Experience leveraging machine learning and analytics to improve user experience, wireless performance, service availability and operational resilience.

Ability to define architectures that support autonomous network operations whilst maintaining governance, security and operational control.

We’re forging the path, and we know we can’t do it alone. That’s why we need visionary minds like yours to join us on this transformative journey. In this case, we’re looking for someone who:

Passionate about Networks

Experience of Large Scale Critical Infrastruture

Solid experience of using Cisco routers and switches, Palo ALto and Fortinet Firewalls

Strong communicator with excellent writing skills.

NESO's flexible benefits programme provides you with more flexibility around your health, lifestyle and protection benefits, here's just a few available: - Flexible Bank Holidays & Holiday Trading - Additional Birthday Day Off - Cycle to Work Scheme, Retail & Gym Discounts - Private Medical Insurance, Critical Illness Insurance & Personal Accident Insurance

At the National Energy System Operator (NESO), we play a vital role in tackling climate change and securing Great Britain's energy future. We already operate the world's fastest decarbonising electricity system and are working towards our ambition to run it carbon-free for a short period this year - provided the market supplies electricity exclusively from renewable sources. Alongside this, we provide expert advice to government on how to deliver a clean power system by 2030. In autumn 2024, the Electricity System Operator (ESO) transitioned to become NESO - an independent, expert public corporation with a whole-system view across electricity, gas, and hydrogen. NESO operates independently and transparently, always acting in the best interests of all energy users. Licensed and regulated by Ofgem, we make impartial decisions that balance sustainability, affordability and security. Our organisation is fully independent from government, the regulator and all commercial interests, with a clear focus on system-wide benefit, long term thing and public value. The time to deliver is now. Join the energy transformation and help shape the future. Your energy. Our future. Together

National Energy System Operator (NESO) recognises the potential of bright and talented individuals, and we encourage you to join us as Great Britain’s energy system undergoes an ambitious, exciting, and vital transformation. Together with industry, we are creating a cleaner, more sustainable energy future.

Research shows that some people may hesitate to apply unless they meet every single requirement. At NESO, we believe potential comes in many forms and we're committed to a fair, inclusive recruitment

We're committed to building a workforce that represents the communities we serve, and a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential. If this role sparks your interest but you're not sure you tick every box, we still want to hear from you. process where everyone has the opportunity to show their talents. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds.