Sr. Network Architect

Network ArchitectWe are seeking an experienced Network Architect to lead the design, strategy, and evolution of our global enterprise network infrastructure. This role is responsible for defining and governing network architectures spanning data centers, campus and branch environments, WAN/SD-WAN, cloud platforms, and security services. The ideal candidate combines strategic vision with deep technical expertise in modern network architectures, including EVPN/VXLAN fabrics, cloud networking, Zero Trust security models, automation, and large-scale global network operations.As a key technical leader, you will partner with infrastructure, cloud, security, and application teams to deliver resilient, secure, and scalable network solutions that support business growth and digital transformation initiatives.Key ResponsibilitiesNetwork Architecture & DesignDesign and govern enterprise network architectures across LAN, WAN, SD-WAN, cloud, and data center environments.Develop scalable, resilient, and secure network topologies that support global business operations.Create and maintain reference architectures, engineering standards, design principles, and technical roadmaps.Lead architecture reviews and provide oversight for all major network-related initiatives.Serve as the primary technical authority and escalation point for complex network design decisions.Data Center Architecture & Fabric DesignLead the strategy, High-Level Design (HLD), and Low-Level Design (LLD) of next-generation data center networks.Architect and optimize Spine-Leaf data center fabrics using EVPN/VXLAN technologies.Design and maintain multi-site data center environments incorporating MP-BGP, MC-LAG, VRFs, and advanced traffic engineering.Define highly available architectures supporting disaster recovery, business continuity, and workload mobility.Establish standards for data center interconnectivity and hybrid cloud integration.Enterprise Routing, SD-WAN & ConnectivityDesign and govern global routing and switching architectures utilizing BGP, OSPF, MPLS, EVPN, and related technologies.Lead the adoption and optimization of SD-WAN, hybrid WAN, and cloud connectivity solutions.Ensure network resilience through fault-domain isolation, rapid failover mechanisms, traffic optimization, and capacity planning.Define standards for internet connectivity, network segmentation, and enterprise edge architectures.Cloud Networking & Hybrid InfrastructureLead architecture and deployment standards for Azure, AWS, and Google Cloud networking environments.Design secure hybrid and multi-cloud connectivity patterns including transit architectures, cloud interconnects, and shared services.Define cloud networking standards for:VNets/VPCsRoute TablesTransit GatewaysNetwork Security Groups (NSGs)ACLsLoad BalancersPrivate connectivity solutionsCollaborate with cloud platform teams to ensure network designs support application modernization initiatives.Security Architecture & ResilienceIntegrate secure-by-design principles into all network architectures.Partner with security teams to implement Zero Trust network models, segmentation, and micro-segmentation strategies.Define secure configuration baselines for network infrastructure including routers, switches, firewalls, and cloud networking platforms.Architect security controls including:Next-Generation Firewalls (NGFW)IDS/IPSSecure Web GatewaysVPN technologiesSSE/SASE platformsConduct threat modeling, architecture risk assessments, and security reviews for new initiatives.Ensure alignment with corporate security standards and industry frameworks such as NIST and ISO 27001.Network Automation & ObservabilityDrive adoption of Infrastructure as Code (IaC) and network automation practices.Develop reusable automation frameworks utilizing Ansible, Python, Terraform, and related technologies.Establish enterprise standards for network telemetry, observability, and performance monitoring.Define monitoring strategies leveraging NetFlow, streaming telemetry, and advanced analytics platforms.Lead continuous service improvement initiatives focused on availability, operational efficiency, and reduced MTTR.Strategy, Governance & LeadershipDevelop and maintain a multi-year network modernization strategy and technology roadmap.Lead initiatives involving SD-WAN, cloud networking, SASE/SSE, automation, and next-generation data center technologies.Define and enforce enterprise network standards, policies, and architectural principles.Evaluate emerging technologies and provide recommendations aligned with business and security objectives.Mentor network engineering teams and provide technical guidance during implementation and operational support activities.Collaborate effectively across Infrastructure, Security, Cloud Engineering, and Application teams to deliver integrated solutions.Required QualificationsExperience10+ years of experience designing, implementing, and supporting enterprise network infrastructure in large-scale production environments.5+ years in a network architecture or senior technical leadership role.Proven experience designing and governing global, multi-site network environments.Technical ExpertiseExpert knowledge of enterprise routing and switching technologies, including:BGPOSPFMPLSEVPNMP-BGPTCP/IPVLANs and Layer 2/Layer 3 networkingDeep experience with modern data center networking architectures including:Spine-Leaf topologiesVXLANEVPNVRFsMC-LAGStrong experience with:SD-WAN technologiesEnterprise WAN architecturesCloud networking (Azure, AWS, GCP)Hybrid cloud connectivityAdvanced understanding of network security principles including segmentation, Zero Trust, encryption, and firewall design.Experience designing highly available and resilient enterprise network infrastructures.Preferred QualificationsExperience implementing and operating SSE/SASE platforms such as Netskope, Zscaler, or Prisma Access.Strong background with Palo Alto, Fortinet, Juniper, Cisco, or equivalent enterprise networking platforms.Hands-on experience with:TerraformAnsiblePythonInfrastructure as Code methodologiesExperience with network observability, analytics, and telemetry platforms.Familiarity with regulatory and security compliance requirements.CertificationsPreferred certifications include one or more of the following:CCIE Enterprise Infrastructure or CCDEJNCIE Enterprise or Data CenterAWS Advanced Networking SpecialtyMicrosoft Azure Network Engineer AssociateCISSPPCNSEKey CompetenciesStrategic thinking and enterprise architecture leadershipStrong analytical, problem-solving, and decision-making skillsAbility to translate business requirements into scalable technical solutionsExcellent communication and executive stakeholder engagement skillsExperience influencing technical direction across multiple teams and disciplinesCollaborative leadership and mentoring capabilities