Network Architect

Network Architect

Dallas, Remote

• Conduct a comprehensive assessment of the GB/BFF network infrastructure and identify all dependencies associated with the existing Domain Controllers and Active Directory.
• Document the current-state network architecture, including LAN/WAN architecture, internet connectivity, firewalls and security zones, VLANs and IP addressing, routing and switching, DNS/DHCP, VPN and remote access, network segmentation, site-to-site connectivity, cloud connectivity, and network security controls.
• Review existing firewall rules, ACLs, routing policies, NAT, VPNs, and other network security configurations.
• Identify legacy, redundant, undocumented, or unnecessary network dependencies that could impact the separation.
• Assess potential IP address overlap, subnet conflicts, DNS dependencies, and routing conflicts domains.
• Identify network risks, gaps, and single points of failure.
• Design the target-state network architecture for Support an independent and secure operating environment.
• Develop the target-state design for: IP addressing and subnet strategy, VLAN architecture, routing architecture, firewall/security-zone architecture, internet connectivity, VPN architecture, DNS/DHCP architecture, network segmentation, remote-access architecture, and cloud connectivity.
• Ensure the architecture supports high availability, scalability, security, and future growth.
• Design appropriate segmentation between user networks, server networks, management networks, security infrastructure, guest networks, and critical applications.
• Work closely with the Active Directory/Identity Architect to identify all network requirements for separating Domain Controllers from domains
• Identify required communication flows between Domain Controllers and DNS, DHCP, domain-joined servers, workstations, applications, Microsoft 365/Azure/Entra ID, and security and management platforms.
• Define required firewall ports, protocols, routes, and network flows.
• Develop network requirements for new Domain Controllers in domain and ensure they are placed in appropriate, secured network segments.
• Validate DNS architecture and name-resolution requirements during the separation.
• Ensure there are no unintended network dependencies that could leave
• Create detailed current-state and target-state network diagrams.
• Maintain network topology and connectivity documentation.
• Develop an IP address/subnet inventory, VLAN inventory, firewall rule matrix, network flow matrix, routing matrix, DNS dependency matrix, and application-to-network dependency matrix.
• Document all assumptions, risks, constraints, and technical decisions.