Senior Cloud Network Engineer

Job Title: Senior Cloud Network Engineer

Type: Full Time / 37.50 hours per week / Hybrid – HO is based in Northampton

*You need to live within a reasonable commuting distance to the HO in Northampton – weekly attendance is expected

Salary DOE from £55k per annum

The closing date for this 20th May or until the right candidate is hired

All internal candidates need to attach a full and relevant CV

Purpose of Role:

We are seeking a Senior Cloud Network Engineer to join our Network Team at Bright Horizons.

The role will focus on Microsoft Azure and You will provide support design and maintain our multi cloud infrastructure.

You will leverage your expertise in multi-region and multi-cloud network architecture to ensure optimal performance,

security and scalability across our cloud environments with emphasis on automation, reliability and governance.

What We Can Offer You

• Our benefits include but are not limited to.
• Flexible working and holiday entitlements
• Discounted childcare in one of our nurseries
• Fantastic range of discounts on high street retailers, grocery stores, cinema tickets, holidays and more
• Wide range of wellbeing resources, supporting our teams for the ups and downs of daily life

Why Bright Horizons?

We’ve been voted Great Place to Work for the last 17 consecutive years, as well as being awarded the newly created Great Place for Wellbeing and Great Place for Women 2022.Our support functions enable our nurseries to deliver the best possible care and education to over 10,000 children across the UK. Through this support, our nurseries can deliver excellence – with 98% of our 300+ portfolio being rated Good or Outstanding by Ofsted. We’re on a mission to change the future for children, families, and the people we work with, and are committed to progressive working values like flexibility, work-life balance, and wellbeing.

Key Accountabilities:

Cloud Network Architecture & Design

• Design and implement Azure network architectures including VNets Subnet Models.
• Develop hybrid connectivity solutions (VPN, ExpressRoute) between on-premises and Azure environments
• Architect highly available and fault-tolerant network solutions across regions.

Implementation & Operations

• Deploy and manage core Azure networking services:
• Azure Virtual Network (VNet)
• Fortinet (Fort-ADC Load Balancers)
• Azure Firewall and NSGs
• Private Endpoints / Service Endpoints
• Monitor network performance and troubleshoot latency, routing, and connectivity issues
• Optimize network performance and cost efficiency

Security & Compliance

• Implement network security controls aligned with Zero Trust principles
• Design segmentation strategies using NSX & Fortigate Firewalls.
• Ensure compliance with internal policies and external standards.
• Conduct network risk assessments and remediation.

Automation & Infrastructure as Code

• Build and maintain Infrastructure as Code (IaC) using tools such as:
• Terraform & Ansible.
• Automate network provisioning, configuration, and validation workflows

Collaboration & Leadership

• Partner with cloud architects, DevOps engineers, and security teams
• Provide technical leadership and mentorship to junior engineers
• Contribute to design reviews and architectural governance.

Key Deliverables / Success Metrics

• Reliable, secure, and scalable Azure network architecture
• Reduced incident rates and faster resolution times
• Increased automation and reduced manual intervention
• Compliance with security and governance standards

Essential Experience:

Technical Expertise

• 5–8+ years in network engineering, with at least 3+ years in Azure
• Strong knowledge of:
• TCP/IP, DNS, BGP, routing protocols
• Network security principles and firewalls

Hands-on experience with:

• Azure networking services (VNet, ExpressRoute, VPN Gateway, Fortinet Firewalls)

Cloud & DevOps

• Experience with Infrastructure as Code (Terraform / Ansible)
• Familiarity with CI/CD tools (Azure DevOps, GitHub Actions)
• Scripting skills (PowerShell, Python, or Bash)

Monitoring & Troubleshooting

• Experience with Azure Monitor, Network Watcher, and Log Analytics
• Strong diagnostic and root-cause analysis skills

Qualifications:

• Azure certifications (e.g., AZ-700, AZ-104, AZ-305)
• Experience with Kubernetes networking (AKS)
• Familiarity with SD-WAN or SASE architectures
• Experience in regulated environments (finance, healthcare, etc.)

Personal Attributes:

• Demonstrates consistent behaviours aligned with our HEART principles, acting with Honesty, Excellence, Accountability and Respect in all interactions, decisions and ways of working.
• Strong problem-solving and analytical thinking
• Ability to communicate complex network concepts clearly
• Proactive mindset with ownership of systems and outcomes
• Comfortable working in cross-functional, distributed teams

Bright Horizons is committed to safeguarding and promoting the welfare of children and young people. This post is subject to safer recruitment practice and pre-employment checks, including an enhanced DBS check, which will be undertaken before any appointment is confirmed. We are an inclusive employer and welcome people from all backgrounds to apply. We will consider reasonable adjustments required by applicants. If you share our passion, values, and have most of the skills listed, we encourage you to apply – as you may be just what we are looking for!

We look forward to receiving your application!

If you experience any problems, please email [email protected] and we will be happy to help.