Lead Network Engineer

Key Responsibilities

• Lead the design, implementation, maintenance, and optimisation of highly available, secure, and resilient LAN, WAN, wireless, data centre, remote-access, and cloud network services.
• Develop network architectures that integrate on-premises environments with public cloud platforms, including Azure and AWS, and support Kroll's business, security, and availability requirements.
• Lead network segmentation initiatives at macro and micro levels, applying security best practices, Zero Trust principles, and identity-based access controls where appropriate.
• Administer and optimise Cisco networking technologies, Palo Alto firewalls, VPN services, SD-WAN platforms, and cloud-native networking services.
• Translate business and technical requirements into supportable network designs, implementation plans, test plans, migration approaches, and operational documentation.
• Monitor and validate network health, performance, capacity, availability, security, resilience, and business continuity across Kroll's global environments.
• Provide Tier 3 escalation support for complex network and security incidents, lead root-cause analysis, and implement sustainable corrective actions.
• Plan and deliver network upgrades, migrations, office deployments, acquisition integrations, and other infrastructure projects, including testing, cutover, and transition to support.
• Identify and champion practical opportunities to automate repeatable network engineering and operational tasks, working with the wider team to introduce proportionate Net Dev Ops  practices that improve consistency, efficiency, and risk reduction.
• Contribute to reusable network automation workflows using tools such as Ansible, Python, APIs, Terraform, and source control, while maintaining primary responsibility for network design, implementation, optimisation, and operational support.
• Apply appropriate peer review, testing, validation, documentation, and rollback controls to automated and manual network changes.
• Maintain accurate network diagrams, standards, configurations, procedures, and support documentation.
• Collaborate with cloud, infrastructure, information security, application, and service management teams to deliver secure and supportable end-to-end solutions.
• Manage technical relationships with network vendors, telecommunications providers, and support partners, including escalation and service improvement activities.
• Champion Kroll's change, security, audit, and governance requirements for production network services, ensuring changes are controlled, traceable, and appropriately approved.
• Provide technical guidance and knowledge sharing to other engineers, promoting consistent engineering standards and continuous improvement across the global network team.

• A minimum of seven years' experience in enterprise network engineering, including substantial experience designing and supporting complex, highly available environments.
• Strong knowledge of enterprise routing and switching, including BGP, OSPF, VLANs, VRFs, QoS, high-availability design, and resilient WAN connectivity.
• Hands-on expertise with Cisco networking technologies, Palo Alto firewalls, VPNs, and SD-WAN platforms such as Cisco SD-WAN/Viptela or Prisma SD-WAN.
• Demonstrable experience with cloud networking in Azure and AWS; experience with GCP or OCI is advantageous.
• Strong understanding of network security principles, including segmentation, encryption, secure remote access, threat prevention, and security policy enforcement.
• Proven experience supporting 24x7 production environments with demanding availability, incident response, disaster recovery, and change-control requirements.
• Experience leading technical delivery through the full lifecycle, from requirements and design through implementation, testing, documentation, and operational handover.
• Excellent analytical, troubleshooting, documentation, and communication skills, with the ability to explain complex concepts clearly to technical and non-technical stakeholders.
• Ability to work effectively across global and cross-functional teams, manage competing priorities, and take ownership of complex technical outcomes.
• Ability to travel for work within the EMEA region up to a few times per month.

• Relevant certifications such as Cisco CCNP Enterprise, CCNP Security, CCIE, Palo Alto PCNSE, AWS Certified Advanced Networking - Specialty, or Microsoft Azure Network Engineer Associate.
• Practical experience with, or a strong interest in developing,…