Lead Specialist Engineer - Networks

Job Description Lead Specialist Engineer - Networks \n Salary: Civil Service Senior Executive Officer (SEO) £41,983 - £48,128 per annum (pro rata), plus a Market Pay Supplement of up to £10,000 per annum (pro rata).\n Location: Porton Down, Wiltshire (on-site). Please note that hybrid working is not available for this role.\n Shape the Future of UKHSA's Network Infrastructure \n \nWe're looking for an experienced and technically skilled Lead Specialist Engineer - Networks to play a key role in maintaining and enhancing the critical network infrastructure that underpins UKHSA's vital public health mission.\n \nThis is an exciting opportunity to work within a highly specialised environment, ensuring the availability, performance, security and resilience of enterprise network services. You'll act as a technical expert within your field, supporting the delivery of robust, secure and reliable networking solutions while contributing to the continuous improvement of our ICT services. As a senior technical specialist, you'll work closely with engineers across the ICT function, respond to incidents and service disruptions, and help drive best practice across network operations and service delivery.\n What You'll Be Doing \n \nAs a Lead Specialist Engineer, you'll support the delivery of technical excellence across UKHSA's network environment and help ensure services remain secure, resilient and fit for future needs.\n \nKey responsibilities include:\n \n- Managing, maintaining and optimising network infrastructure to ensure high levels of availability and performance.\n \n- Configuring, monitoring and supporting network hardware, software and associated technologies.\n \n- Troubleshooting incidents, outages and technical issues, taking swift action to minimise disruption and restore service.\n \n- Maintaining system security, integrity and resilience, including access controls, backup arrangements and disaster recovery processes.\n \n- Applying patches, upgrades and enhancements in a timely and controlled manner.\n \n- Monitoring performance, capacity and utilisation trends, providing recommendations for future improvements and investment.\n \n- Producing and maintaining technical documentation, procedures and operational standards.\n \n- Supporting infrastructure projects, system implementations, upgrades and migrations.\n \n- Providing technical guidance, knowledge sharing and support to colleagues, including junior engineers where required.\n \n- Ensuring compliance with UKHSA policies, security standards and industry best practice.\n \n- Keeping up to date with emerging technologies and making recommendations on innovations that could benefit UKHSA's network services.\n \n- Providing accurate effort estimates, technical advice and updates to senior engineers and managers.\n \n- Participating in out-of-hours support activities when required.\n About You \n \nWe're looking for someone who combines strong technical expertise with a proactive and collaborative approach.\n \nYou'll have experience managing and supporting complex network environments and be confident working across a broad range of networking technologies. You'll be able to diagnose and resolve technical issues effectively, balance multiple priorities and communicate complex technical information clearly to a variety of audiences.\n Essential Criteria \n \nThis is a role that demands detailed knowledge and considerable experience of specialist technologies. Therefore, each candidate must be able to demonstrate qualification and expertise in multiple integral technologies as indicated on the list below:\n \n- Extreme Networks and Cisco network equipment.\n \n- Network routing and TCP/IP protocols.\n \n- Palo Alto Firewalls.\n \n- Extreme Networks (or equivalent) Wireless access point technologies.\n \n- VPN deployment and configuration.\n \n- NCSC requirements for the implementation, management and administration of secure networks.\n \n- Familiarity with NCSC Secure by Design Principles.\n \n- Understanding of network security principles and practices, data encryption and remote access technologies.\n \n- WAN/LAN/WLAN Architectures.\n \n- Application Delivery Controllers and/or Load Balancing technologies.\n \n- Must have previous experience of undertaking a specialist role and of managing systems for a large user base.\n \n- Experience with monitoring a network infrastructure to optimise performance and support capacity planning.\n \n- Ability to analyse and interpret information, pre-empt and evaluate issues, and recommend an appropriate course of action to address the issues.\n \n- Ability to work on own initiative and organise own workload without supervision, working to tight and often changing timescales.\n \n- Formal technical qualification, e.g. Cisco Certified Network Associate (CCNA) or equivalent.\n Desirable Criteria \n \n- Experience with Network Function Virtualisation and