Global IT Network Service Senior Specialist

Campari Group today is a major player in the global branded spirits industry, with a portfolio of over 50 premium and super premium brands, marketed and distributed in over 190 markets around the world, with leading positions in Europe and the Americas.

Headquartered in Milan, Italy, Campari Group owns 25 plants worldwide and has its own distribution network in 26 countries, and employs approximately 4,700 people.

Shares of the parent company Davide Campari - Milano N.V. are listed on the Italian Stock Exchange since 2001. Campari Group is today the sixth-largest player worldwide in the premium spirits industry.

Role Overview

The Network Services Senior Specialist is the senior specialist for Campari's network services, making sure the network across offices, plants, distilleries, warehouses and the cloud is reliable, secure, increasingly automated and delivered as designed. This covers LAN, Wi-Fi, WAN and SD-WAN, firewalls, secure access service edge (SASE) with Zscaler, and Azure networking.
This is a technical service ownership role. The managed service providers run, change and support the network; the Network Services Senior Specialist governs the quality and compliance of that service day to day and holds the providers to account, within the framework set by the Network Services Manager. You will drive the move to automation and infrastructure as code: maintaining the automation backlog, specifying what is needed, reviewing what the providers and the cloud platform team build, and measuring the result. You will use AI tools in your own daily work to save time and improve how the service runs.
You will work closely with the Network Architect, who sets the target architecture and designs, and with local IT, so that what is designed centrally works for every site.

Key Responsibilities

1. Service Ownership and Operations

• Manage the technical quality of network services across all sites: standards, roadmap input (aligned to the Network Architect's target architecture), support model and performance against agreed service levels.
• Monitor operational performance against agreed SLAs and quality expectations, identifying systemic improvement opportunities rather than only individual failures.
• Act as technical escalation point for complex network incidents, directing the provider's investigation, mobilising the right expertise and escalating major incidents to the Network Services Manager.
• Drive problem management for recurring network faults, assure the quality of root cause analyses, and make sure permanent fixes are implemented rather than repeatedly worked around.
• Run the technical readiness check for service transition, confirming the requirements defined in the service design are met before go-live and recommending acceptance to the manager.

2. Provider Management

• Act as the day-to-day technical counterpart to the managed service providers' delivery teams, giving technical direction within agreed standards and governing the quality of what they deliver.
• Produce the technical evidence for operational reviews: recurring fault patterns, change quality, depth of root cause analysis, backlog health and adherence to agreed procedures.
• Raise and drive service improvement plans where provider performance or technical quality falls short, tracking them to measurable closure.
• Ensure the providers' runbooks, knowledge articles and operational procedures are accurate, current and in use, and send back documentation that does not meet the agreed standard.
• Provide the Network Services Manager, Vendor Management and Procurement with technical input and performance evidence for contracts and statements of work, including automation commitments; commercial decisions stay with the manager.

3. Change and Delivery Assurance

• Approve standard and normal network changes within delegated authority, require rework where evidence is missing, and refer major or high-risk changes to CAB and the manager.
• Ensure every network change is correctly classified, linked to its configuration items, risk-assessed and supported by before-and-after evidence.
• Translate the Network Architect's designs into executable delivery requirements, configuration templates and acceptance criteria, so there is no gap between design intent and implementation.
• Drive the provider's execution of network projects (site rollouts, M&A integration, technology refresh), and recommend acceptance or rejection of deliverables against the acceptance criteria.
• Escalate to the Network Architect any situation where the design cannot be implemented as specified, or where field conditions require a design decision.

4. Network Platform Ownership

• Maintain the network standards and configuration baselines agreed with the Network Architect for LAN, Wi-Fi, WAN and SD-WAN, firewalls, Zscaler and Azure networking, and make sure the providers apply and maintain them.
• Require the providers to report compliance against the baselines, check it independently, and drive remediation of configuration drift and non-standard implementations.
• Keep the network inventory and configuration items accurate: require the providers to keep them reconciled with the live estate and ServiceNow, and check them through regular sample audits.
• Keep independent visibility of network health and user experience through SD-WAN analytics, Zscaler digital experience monitoring, Azure Network Watcher and site tests, rather than relying only on provider reports.
• Give the Network Architect structured feedback from operations (what fails, what does not scale, capacity and performance trends, failover test results) as input to design evolution and capacity planning.
• Automation, AI and Continuous Improvement
• Maintain the network automation backlog: identify repetitive work and recurring faults from incident, change and ticket data, and propose priorities by effort saved, risk reduced and cost.
• Specify automation and infrastructure-as-code requirements (configuration backup, compliance checks, before-and-after change validation, and Azure networking and Zscaler policy as code), and agree whether the providers or the cloud platform team deliver them.
• Review and recommend acceptance of automation against agreed standards, reading code, pull requests and pipeline results well enough to challenge quality, and hold the providers to their automation commitments.
• Measure the effect of automation on manual effort, change-related incidents and configuration drift, and report progress in provider reviews and to the line manager.
• Use AI tools daily to analyse incident and change trends, test provider root cause analyses, summarise provider reports and draft runbooks and change reviews. Use only company-approved tools, check all output, and never use AI to approve a change.

6. Network Security and Compliance

• Apply the network security standards agreed with Cyber Security consistently across all sites and in Azure.
• Govern the provider's vulnerability remediation and patching of network devices, verifying that remediation is applied within SLA.
• Work with Cyber Security on containment and resolution of network-related security incidents.
• Provide operational evidence for audits, regulatory compliance activities and security reviews, and ensure audit findings assigned to network services are technically remediated.

7. Sites, OT and Local IT Partnership

• Act as Global IT's main network contact for local IT, reflecting how offices, plants, distilleries and warehouses use the network, and start improvement with the sites with the poorest experience.
• Work with the OT Network Engineer on the boundary between office and plant networks, applying the same standards, monitoring and compliance checks where agreed.
• Release significant changes with local IT involvement, clear communications and a rollback plan, and agree time-limited exceptions with documented risk acceptance.

Key Stakeholders

Internal: Network Services Manager, Network Architect, Local IT, regional service managers and the OT Network Engineer, Cyber Security and the cloud platform team, Service Management (ServiceNow), project managers, Supply Chain, Vendor Management and Procurement
External: Managed service providers, connectivity providers and technology vendors

Measures of Success

Within the first 12 months, success looks like this:

• SLAs are met at global and site level, recurring incidents fall through problem management, and the improvement plans you raise close on time.
• Every provider change carries before-and-after evidence, and incidents caused by changes fall measurably.
• Network configuration items in ServiceNow pass quarterly sample audits, and configuration drift falls quarter on quarter.
• You have contributed to an agreed automation roadmap that is in delivery: the providers have automated configuration backup and compliance reporting, and Azure networking and Zscaler policy are on an agreed path to code with the cloud platform team.
• Experience data is live for every site, and the sites with the poorest experience improve.
• At least three routine activities are AI-assisted, such as the provider review pack, change reviews and runbook updates, with the time saved recorded.

Experience & Qualifications

Must have

• 5+ years in enterprise networking, including at least 2 years governing an outsourced or managed network service, or in a provider-facing service role, in a multinational organisation.
• Hands-on experience governing a managed network service: change review, SLA and quality reviews, problem management and improvement plans, using ITIL practices and ServiceNow or a similar tool.
• Solid technical knowledge of LAN, Wi-Fi, WAN/SD-WAN, firewalls, SASE/Zscaler and Azure networking, enough to troubleshoot and challenge providers on their changes.
• Solid incident and problem management experience, including cross-vendor troubleshooting and rigorous root cause analysis.
• Good understanding of network automation and infrastructure as code: able to read a script, playbook or pipeline, judge a provider's automation proposal and turn it into clear requirements.
• Uses AI tools in daily work to save time or improve a process (for example analysing incidents, drafting documentation or reviewing changes), checks the output critically, and can show a concrete example.
• Experience supporting a designed solution through provider implementation to technical acceptance.
• Fluent English, written and spoken.

Nice to have

• Hands-on experience writing or adapting network automation, for example with Python, Ansible, Git, Terraform or Bicep, NetBox or CI pipelines.
• Network certifications such as Cisco CCNP Enterprise or CCNP Automation, Microsoft Azure Network Engineer Associate (AZ-700), Zscaler, Fortinet or Check Point, or equivalent experience.
• ITIL 4 Foundation or higher.
• OT or manufacturing network environments, and familiarity with regulatory and audit requirements.
• Degree in Computer Science, Computer Engineering or a related field, or equivalent practical experience.
• Italian or another European language.

Skills & Behaviours

• Improvement mindset: spots repetitive work and recurring faults, and pushes the providers to automate or fix them for good.
• Judgement and escalation: works autonomously within agreed frameworks and knows when a decision belongs to the manager, the Architect or CAB.
• Practical use of AI: uses AI and data to work faster and better, shares what works with the team, and checks the output before relying on it.
• Evidence-driven rigour: makes decisions on evidence, with the documentation discipline that keeps them auditable.
• Structured problem solving: strong analytical skills, effective under pressure and ambiguity.
• Service mindset: thinks in terms of end-to-end business impact rather than individual components.
• Influence and communication: explains technical topics in plain language, challenges providers constructively, and says no with a workable alternative.

Additional Requirements

Up to 10% international travel.

Our commitment to Diversity & Inclusion:

At Campari Group we believe in building more value together, thus we see diversity in all forms as a source of enrichment. Our employment policies and practices ensure that we are committed to providing equal employment opportunities in all aspects of employment without regard to any individual’s race, religion, creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, sexual orientation, gender identity or characteristics or expression, political affiliation or activity, age, veteran status, citizenship, or any other characteristic protected by law.

Campari Group believes that fair compensation and equal opportunities are crucial for employees’ well-being, empowerment, and engagement.  Our efforts to ensure fair pay have earned us the Fair Pay Certification by Fair Pay Workplace, an independent organization dedicated to dismantling pay disparities based on gender, race and their intersection.

Note to applicants:

Your application will be assessed based on your abilities, expertise, general knowledge and experience, not because of any confidential, proprietary or trade secret information you may possess. You must not disclose to Campari Group any such information. In the event that you are asked a question that cannot be answered without disclosure of any confidential, proprietary or trade secret information (including from a current or prior employer or their vendors or customers), you must decline to answer the question.

Notice to third party agencies:

Please refrain from cold-calling or emailing our executive leadership team or the HR community directly. The Talent Acquisition department manages centralized recruiting operations globally, including the selection and management of external suppliers. Currently, our preferred supplier list is at full capacity. To ensure we have your information on file for future consideration, we kindly request that you complete the online form provided here.