Endeavour Group is hiring a Senior Network Engineer to provide pivotal support for our hospitality, operational sites, support offices, and retail business. You will manage the Network infrastructure lifecycle from design through to system maintenance and play a key role in safeguarding the group’s data against unauthorized access.
What You'll Do
- Be responsible for providing, supporting, and operating Endeavour Group’s IT network services (350+ sites) from design through implementation and maintenance.
- Provide provisioning and support in line with infrastructure governance and security principles, including following the ITIL process.
- Safeguard business data and information against unauthorized access, modification, destruction, or disclosure.
- Perform implementation, support, and improvement of relevant infrastructure.
- Drive the implementation and maintenance of end-to-end network systems.
- Prepare and maintain procedures, technical documentation, and process diagrams.
- Establish and test effective disaster recovery plans for key business systems.
- Configure, manage, and maintain enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point, Cisco ASA/Firepower).
- Perform rule creation, policy updates, and configuration changes to support business and security requirements.
- Monitor and analyze firewall logs, alerts, and security events to detect and respond to potential threats.
- Conduct regular firewall audits, rule base reviews, and cleanup of unused or obsolete rules.
- Implement network segmentation, VPNs, and secure remote access.
- Design firewall architecture for new projects, data centers, and cloud integrations (AWS, Azure, GCP).
- Stay current with network technology, including required certifications.
- Communicate with and manage stakeholders' expectations at all levels of the business.
What We're Looking For
- Minimum 5 years experience in customer-centric environments.
- Core Network: SD-WAN (Meraki, Cisco), WAN, LAN Cisco, Routing (OSPF, BGP), Switching, Wireless, DNS/DHCP, load balancing, NMS.
- VPN: Anyconnect/Secure Client.
- Network Security: Zscaler Internet Access/Client Connector, Cisco WLC, Cisco Prime Infrastructure, Cisco DNAC, Cisco ISE, Azure, knowledge of Zero Trust architecture and ZTNA solutions (e.g., Zscaler, Cloudflare), AAA/RADIUS/TACACS, IDS & IPS, proxies.
- Firewalls: ASA, Palo Alto Networks, Fortinet, FortiGate.
- Scripting/automation skills: Meraki API, Python, Ansible.
Nice to Have
- Certifications: Meraki / Cisco Network certifications, NSE 4+, Cisco CCNP Security, PCNSE, Check Point CCSA/CCSE.
Technical Stack
- SD-WAN (Meraki, Cisco), Cisco Routing/Switching/Wireless, OSPF, BGP, DNS/DHCP, Load Balancing, NMS
- Anyconnect/Secure Client VPN, Zscaler, Cisco WLC/Prime/DNAC/ISE, Azure
- Zero Trust/ZTNA, AAA/RADIUS/TACACS, IDS/IPS, Proxies
- ASA, Palo Alto Networks, Fortinet/FortiGate, Check Point
- Meraki API, Python, Ansible, AWS, GCP
Benefits & Compensation
- Hybrid ways of working.
- Flexible working in every sense.
- An exclusive discount card for BWS, Dan Murphy’s, Woolworths, BIG W and other Endeavour Group brands, including our ALH pubs.
- Range of free services to help you live well and support your physical, mental and financial wellbeing.
- Dedicated learning and development options to grow an idea, yourself, and your career.
- Access to specialized training and a supportive network of leaders who are invested in your career progression.
Work Mode
This role operates in a hybrid capacity.
We are committed to fostering a diverse and inclusive workplace and welcome all applicants who meet the skills and experience requirements.






