Network Engineer

If you love beauty, you’re in the right place.

As the ultimate curator of over 100 of the most in-demand, highly innovative and boundary-pushing beauty brands, we are the go-to destination for worldwide beauty discovery.

Together through our neighbourhood stores, online presence and loyalty scheme, Space NK has built a flourishing community in which to discover beauty. The customer is at the heart of everything we do, and we will always endeavour to offer everything they need to help them explore, experiment, and enjoy our brands.

The Network Engineer will support, maintain and modernise Space NK’s network services across Microsoft Azure, corporate offices, distribution and data centre environments, and the retail store estate.

This hands-on engineering role is responsible for the administration and continuous improvement of cloud and on-premises networking, including routing, switching, firewalls, wireless, WAN connectivity and secure hybrid connectivity. The role will help improve network security, operational reliability and Space NK’s transition towards a modern, cloud-enabled network architecture.

Working closely with Platform Engineering, Security, Cloud, Infrastructure, Application and Store Operations teams, the engineer will implement agreed network controls, resolve technical issues and deliver defined areas of project and transformation work. The role will apply automation, robust governance and secure-by-default principles across cloud, corporate, distribution and retail networking.

The successful candidate will have strong foundations in enterprise networking, together with the capability and ambition to develop deeper expertise in Azure networking, hybrid connectivity, security, automation and modern network technologies.

• Administer and support Azure Virtual Networks (VNets), subnets, VNet peering and IP addressing.
• Implement and maintain Network Security Groups (NSGs), route tables, User Defined Routes (UDRs) and network segmentation under agreed designs.
• Support Azure Firewall, firewall policies, network rules, application rules and traffic flows.
• Assist with the operation and troubleshooting of Azure VPN Gateway and Express Route connectivity.
• Support Azure networking services including Private Link, Private Endpoints, Load Balancer, Application Gateway and Front Door.
• Use Azure Network Watcher, Azure Monitor, connection diagnostics, flow logs and packet capture to investigate network issues.
• Support the implementation of secure and resilient connectivity between Azure and on-premises environments.
• Maintain Azure network documentation, diagrams, IP addressing and configuration information.

• Administer and support enterprise LAN, WAN, switching, routing and wireless infrastructure.
• Configure and troubleshoot VLANs, trunking, routing, NAT, ACLs, VPNs and network segmentation.
• Support routing technologies including static routing, BGP and OSPF, with opportunities to develop deeper routing knowledge.
• Administer network infrastructure across platforms such as Cisco, Cisco Meraki, Sonic Wall, Aruba/HPE or equivalent technologies.
• Support firewall operations including rules, NAT policies, VPNs, security zones and high-availability configurations.
• Troubleshoot core network services including DNS, DHCP, NTP and network authentication.
• Use tools such as Wireshark, ping, trace route, iperf and vendor diagnostics to investigate connectivity and performance issues.
• Support network infrastructure at corporate and distribution locations, including switches, firewalls, wireless access points and WAN…