Design Corporate IT (network) for a warehouse or fulfilment or factory type org

Hey All,

(I'm an occasional lurker so not sure if this is the best place to post)

I work in a tech-heavy international fulfilment business. We have large warehouses where customer fulfilment (for delivery) occurs plus distributed business offices where business people and many developers, infrastructure etc technologists work. We do not have an IT function / IT department. IT services (such as wifi, print, business apps etc) is something done as a "when you've got time" / on the side for the technologists creating code and running the fulfilment business. You can imagine that as a consequence employee IT services aren't a top level user experience. We want to fix that and establish an enterprise / corporate IT function.

One of the sticking points we are struggling with is where does the "production" (i.e. warehouse) network stop and the shared enterprise network start ? We want to keep corporate networking separate from production so that, for example, if our corp network is compromised, the production warehouses keep running independently. We have employees in each warehouse. Each regular and visiting warehouse employee needs to be able to have the same user experience as if they were in the head office. We don't want our warehouse colleagues feeling they have a reduced experience (e.g. needing to manually VPN). Would you separate physically or logically and how is that done in other orgs ?

One other point: we are very heavily focused on SaaS apps so employees pretty much work through the browser. I wouldn't generally expect to need any local servers. Juniper core net.

I've tried searching online extensively and talking with contacts but can't find out how other fulfilment / warehouse / factory etc environments operate. I don't expect a car company for example has factory robots hanging off the same network as an office receptionist in HQ. Anyone have insights ?

Thanks very much indeed.