" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eNetwork Engineer\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"29930\"\u003e Information Technology \u003c/li\u003e \u003cli data-id=\"29931\"\u003e Network Management \u0026amp; Administration \u003c/li\u003e \u003cli data-id=\"29932\"\u003e Tewkesbury \u003c/li\u003e \u003cli data-id=\"29933\"\u003e Permanent / Full time \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 12/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cdiv class=\"description\"\u003e \u003cstrong\u003eLocation:\u003c/strong\u003e Tewkesbury (~3 days p/w on-site)\u003cbr\u003e \u003cstrong\u003eSalary:\u003c/strong\u003e \u0026pound;45,000 - \u0026pound;65,000\u003cbr\u003e \u003cstrong\u003eClearance Required:\u003c/strong\u003e DV\u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eAbout PentenAmio\u003c/strong\u003e\u003cbr\u003e PentenAmio is a leading provider of advanced digital security solutions that power national security and resilience across the UK, Australia and our allies. Focused on solving complex digital challenges that others avoid, we embrace the impossible to deliver transformative technologies that protect those who protect us.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e Across the UK and Australia, PentenAmio combines a legacy of knowledge and proven delivery across secure mobility and AI-driven deception technologies. Our work spans Government and Defence markets across civil and military applications, powering intelligent advantage on a global scale.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eTypical Activities\u003c/strong\u003e\u003cbr\u003e Working in collaboration with internal stakeholders across Service Operations, Solutions Architecture, Project Management and Security / Information Assurance, the Network Engineer will design, build and support the networks that underpin our secure communications services, provide level 3 support for network and voice incidents, and prepare secure and air-gapped environments for accreditation.\u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u003cul\u003e \u003cli\u003eDesign, plan and deploy network infrastructure across our hybrid AWS and on-premises estate, working with solutions architects on upcoming projects\u003c/li\u003e \u003cli\u003eProduce and maintain HLDs, LLDs, network diagrams and as-built documentation\u003c/li\u003e \u003cli\u003eConfigure, deploy and maintain routers, switches, firewalls and load balancers (Cisco, Juniper, Fortinet), including BGP and OSPF routing and site-to-site and remote-access VPNs\u003c/li\u003e \u003cli\u003eDesign, configure and support Cisco Unified Border Element (CUBE), SIP trunking and QoS policies to protect voice quality\u003c/li\u003e \u003cli\u003eDesign, deploy and maintain air-gapped and segregated networks, applying security hardening and baselines (e.g. CIS, NCSC guidance)\u003c/li\u003e \u003cli\u003eWork with Security / IA teams to meet compliance and accreditation requirements, including documentation, evidence and risk assessments\u003c/li\u003e \u003cli\u003eDesign and manage AWS networking and hybrid connectivity, including Transit Gateway, Direct Connect and site-to-site VPN\u003c/li\u003e \u003cli\u003eMonitor network and voice service health, analyse traffic patterns and maintain logging to support fault finding and capacity planning\u003c/li\u003e \u003cli\u003eProvide level 3 escalation support, diagnose outages with suppliers and carriers, and carry out root cause analysis to drive permanent fixes\u003c/li\u003e \u003cli\u003eResearch and evaluate new network technologies, contribute to standards and best practice, and mentor colleagues\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eWhat we\u0027re looking for\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eProven experience designing, implementing and troubleshooting enterprise network infrastructure\u003c/li\u003e \u003cli\u003eBGP and OSPF design, configuration and troubleshooting\u003c/li\u003e \u003cli\u003eStrong knowledge of TCP/IP, VLANs, spanning tree, HSRP / VRRP and QoS, with Cisco routers and switches (IOS / IOS-XE)\u003c/li\u003e \u003cli\u003eCisco Unified Border Element (CUBE) experience, including SIP trunking, dial peers and troubleshooting\u003c/li\u003e \u003cli\u003eStrong understanding of SIP and RTP / RTCP, including call flows, SDP negotiation, codecs and DTMF, and voice QoS\u003c/li\u003e \u003cli\u003eExperience diagnosing voice issues using debugs, SIP traces and packet capture (e.g. Wireshark)\u003c/li\u003e \u003cli\u003eFirewall configuration and policy management (Fortinet FortiGate and/or Cisco) and IPsec site-to-site and remote-access VPNs\u003c/li\u003e \u003cli\u003eAWS networking experience (VPC design, subnets, routing, security groups, Transit Gateway, Direct Connect) and hybrid connectivity using site-to-site VPN and BGP\u003c/li\u003e \u003cli\u003eNetwork segmentation, device hardening to recognised standards (e.g. CIS), patching, and working to formal change control\u003c/li\u003e \u003cli\u003eCCNP Enterprise or equivalent (or working towards), plus the ability to produce HLDs / LLDs and technical documentation and to identify and mitigate risk\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eDesirable\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eExperience building and maintaining air-gapped networks, cross-domain solutions or data diodes, and supporting security accreditation (e.g. UK Government / MOD frameworks, NCSC guidance, ISO 27001)\u003c/li\u003e \u003cli\u003eCisco Unified Communications Manager (CUCM), secure voice (SIP over TLS, SRTP), other session border controllers or voice gateways, and CCNP Collaboration\u003c/li\u003e \u003cli\u003eNetwork automation using Ansible, Terraform or Python, Git for configuration version control, and monitoring tools such as Prometheus, Grafana, Splunk and/or ELK\u003c/li\u003e \u003cli\u003eAWS Network Firewall \u0026amp; WAF, AWS certification (e.g. Advanced Networking Specialty), or Azure / GCP networking\u003c/li\u003e \u003cli\u003eEIGRP, MPLS / VRFs, IPv6, load balancers, 802.1X / NAC, and PKI and certificate management\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u003cbr\u003e \u003cstrong\u003eWhy Work at PentenAmio?\u003c/strong\u003e\u003cbr\u003e At PentenAmio, we value our employees and offer a comprehensive benefits package, including:\u003cbr\u003e \u003cul\u003e \u003cli\u003eLife Insurance - X4 Salary\u003c/li\u003e \u003cli\u003e2:30pm finish on Fridays\u003c/li\u003e \u003cli\u003eOption to work 9-day-fortnight\u003c/li\u003e \u003cli\u003ePrivate Health Scheme\u003c/li\u003e \u003cli\u003eEV Salary Sacrifice scheme\u003c/li\u003e \u003cli\u003eSalary Sacrifice Company Pension, matched up to 10%\u003c/li\u003e \u003cli\u003e25 Days Holiday + Bank/Public Holidays\u003c/li\u003e \u003cli\u003eEnhanced Maternity \u0026amp; Paternity leave\u003c/li\u003e \u003c/ul\u003e Additional perks:\u003cbr\u003e \u003cul\u003e \u003cli\u003eFree on-site parking\u003c/li\u003e \u003cli\u003eCasual dress code\u003c/li\u003e \u003cli\u003eFree fruit in the office\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eQualifications \u0026amp; Eligibility\u003c/strong\u003e\u003cbr\u003e To be eligible for this position you must:\u003cbr\u003e \u003cul\u003e \u003cli\u003eProven experience in network infrastructure; and,\u003c/li\u003e \u003cli\u003eBe a British citizen; and\u003c/li\u003e \u003cli\u003eHold or be eligible for UK National Security Vetting (NSV) - DV level clearance.\u003c/li\u003e \u003c/ul\u003e PentenAmio is committed to providing equality of opportunity for all. We aim to ensure our workplaces are free from discrimination and that our current and future colleagues are treated fairly and with dignity and respect. Please inform us of any reasonable adjustments that we may need to make. \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"926309\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "