If you love beauty, you’re in the right place.

As the ultimate curator of over 100 of the most in-demand, highly innovative and boundary-pushing beauty brands, we are the go-to destination for worldwide beauty discovery.

Together through our neighbourhood stores, online presence and loyalty scheme, Space NK has built a flourishing community in which to discover beauty. The customer is at the heart of everything we do, and we will always endeavour to offer everything they need to help them explore, experiment, and enjoy our brands.

Network Engineer | Space NK, London

Reporting to: Platform Engineering Principal

Location: London/hybrid

Department: Technology

Role Overview

The Network Engineer will support, maintain and modernise Space NK’s network services across Microsoft Azure, corporate offices, distribution and datacentre environments, and the retail store estate.

This hands-on engineering role is responsible for the administration and continuous improvement of cloud and on-premises networking, including routing, switching, firewalls, wireless, WAN connectivity and secure hybrid connectivity. The role will help improve network security, operational reliability and Space NK’s transition towards a modern, cloud-enabled network architecture.

Working closely with Platform Engineering, Security, Cloud, Infrastructure, Application and Store Operations teams, the engineer will implement agreed network controls, resolve technical issues and deliver defined areas of project and transformation work. The role will apply automation, robust governance and secure-by-default principles across cloud, corporate, distribution and retail networking.

The successful candidate will have strong foundations in enterprise networking, together with the capability and ambition to develop deeper expertise in Azure networking, hybrid connectivity, security, automation and modern network technologies.

Key Responsibilities

Azure Cloud Networking

· Administer and support Azure Virtual Networks (VNets), subnets, VNet peering and IP addressing.

· Implement and maintain Network Security Groups (NSGs), route tables, User Defined Routes (UDRs) and network segmentation under agreed designs.

· Support Azure Firewall, firewall policies, network rules, application rules and traffic flows.

· Assist with the operation and troubleshooting of Azure VPN Gateway and ExpressRoute connectivity.

· Support Azure networking services including Private Link, Private Endpoints, Load Balancer, Application Gateway and Front Door.

· Use Azure Network Watcher, Azure Monitor, connection diagnostics, flow logs and packet capture to investigate network issues.

· Support the implementation of secure and resilient connectivity between Azure and on-premises environments.

· Maintain Azure network documentation, diagrams, IP addressing and configuration information.

On-Premises Networking

· Administer and support enterprise LAN, WAN, switching, routing and wireless infrastructure.

· Configure and troubleshoot VLANs, trunking, routing, NAT, ACLs, VPNs and network segmentation.

· Support routing technologies including static routing, BGP and OSPF, with opportunities to develop deeper routing knowledge.

· Administer network infrastructure across platforms such as Cisco, Cisco Meraki, SonicWall, Aruba/HPE or equivalent technologies.

· Support firewall operations including rules, NAT policies, VPNs, security zones and high-availability configurations.

· Troubleshoot core network services including DNS, DHCP, NTP and network authentication.

· Use tools such as Wireshark, ping, traceroute, iperf and vendor diagnostics to investigate connectivity and performance issues.

· Support network infrastructure at corporate and distribution locations, including switches, firewalls, wireless access points and WAN connectivity.

Retail Store Networking

· Support Space NK's retail network environment, including Cisco Meraki networking, WAN connectivity, Wi-Fi and store infrastructure.

· Deploy and maintain standard network configurations for new stores, refurbishments and relocations.

· Support SD-WAN, MPLS, Internet and 4G/5G failover connectivity where deployed.

· Troubleshoot store connectivity issues involving tills/POS, payment devices, Wi-Fi, corporate devices and other network-connected services.

· Implement agreed network segmentation between POS, corporate, IoT, CCTV and guest networks.

· Assist with WAN performance and Quality of Service (QoS) requirements for business-critical services.

· Work directly with ISPs, network providers and other suppliers to investigate and resolve service issues.

· Maintain standard configurations, network diagrams and deployment documentation for the store estate.

Hybrid Connectivity & Network Security

· Support connectivity between Azure, corporate locations, distribution environments and retail stores.

· Operate and troubleshoot site-to-site VPNs, ExpressRoute and other private connectivity services.

· Investigate routing, latency, packet loss, MTU and connectivity issues across hybrid environments.

· Implement agreed network segmentation, firewall, ACL and traffic-flow controls.

· Apply least privilege, Zero Trust and secure-by-default principles to network changes.

· Work with Cyber Security to investigate network-related security events and implement agreed remediation.

· Support network controls required for PCI DSS, ISO 27001 and other applicable security and compliance requirements.

Monitoring, Troubleshooting & Automation

· Monitor network availability, performance and capacity using Azure Monitor, SNMP, Syslog, NetFlow and network monitoring platforms.

· Investigate network incidents across cloud, corporate, distribution and retail environments and perform root-cause analysis where appropriate.

· Take responsibility for assigned incidents and technical tasks through investigation, escalation and resolution.

· Engage directly with ISPs, carriers and technology vendors where third-party assistance is required.

· Maintain accurate incident, change and problem records and contribute to technical runbooks and knowledge documentation.

· Use scripting and automation where appropriate, with opportunities to develop skills in PowerShell, Python, Azure CLI, Terraform and APIs.

· Contribute to standardised network configurations and the adoption of Infrastructure/Network-as-Code practices.