Manager, Network Infrastructure

The Manager, Network Infrastructure leads WME's global network and voice estate — the connectivity, wireless, security, and telephony that every office and every user depends on across eight sites. This is a hands-on technical manager: the role both leads a team of four network and voice engineers and serves as the senior technical authority for the estate, staying close enough to the technology to make architecture and troubleshooting calls, not just manage them. The role owns LAN / WAN and switching, Palo Alto firewall management — the platform WME routes and runs site-to-site connectivity from — enterprise wireless, network security and Zero Trust (802.1X and network access control), core network services (DNS / DHCP / IPAM), site-to-site connectivity and internet circuits, and voice / unified communications including Cisco Call Manager. It runs the network as a dependable service, works hand-in-hand with the cybersecurity function on security incident response and triage, and is the seat that finally puts management and backup coverage around a network and voice function that has carried single points of failure for too long. The role builds and operates within the enterprise network and security architecture standards set by the Principal Enterprise Architect, and partners with the cybersecurity governance function and the managed security services partner on Zero Trust and network security. Scope & Boundaries In scope: people leadership of the global network and voice team; LAN / WAN, switching, Palo Alto firewall management (perimeter, routing, and site-to-site), enterprise wireless, network security (Zero Trust, 802.1X, NAC), segmentation, core network services (DNS / DHCP / IPAM), internet circuits and carrier management, and voice / UC including VoIP and Cisco Call Manager. Team & single-point-of-failure mandate: leads four globally distributed network and voice engineers, and owns the backup-coverage plan that eliminates the documented single points of failure in the network and telecom functions — building bench depth rather than letting coverage default upward. Owns the wireless contract resource: the WiFi Engineer (12-month contract) reports to this role, including the month-9 renew / convert / absorb decision. Relationship to the Principal Enterprise Architect (#55): builds and operates within the enterprise network, Zero Trust, and security architecture standards #55 sets; owns the engineering and operation, not the enterprise standards. Cloud connectivity boundary: this role owns the WAN / circuit side of hybrid cloud connectivity (e.g., Azure ExpressRoute / VPN); the Senior Platform Engineer (#61) and server & cloud function own the in-cloud network (VNets, NSGs, in-cloud routing). Partnerships: the cybersecurity function on security incident response and triage; the Sr Manager, GRC (#53) on network security governance and audit; the Senior IAM Engineer (#62) on 802.1X / NAC identity integration; the managed…