Overview
Skills
Job Details
Job Description:
Lead solutioning and delivery architecture for largescale network modernization programs across WAN/LAN/WLAN and cloud networking. Own endtoend designs for SDWAN to SASE/ZeroTrust transitions, NetworkasaService (NaaS) models, multicloud connectivity patterns, and observability/automation, aligning to business outcomes, security, and experience (SLA/XLA).
Roles and Responsibilities
- Own discovery, assessment and targetstate reference architectures for enterprise networks (WAN/LAN/WLAN, DC/Cloud, OT/edge).
- Design and document HLD/LLD for SDWAN platforms and SASE/ZeroTrust controls (SWG, CASB, ZTNA, FWaaS).
- Define multicloud networking patterns (AWS TGW/Transit, Azure vWAN/Route Server, Google Cloud Platform NCC) and hybrid connectivity (ExpressRoute/Direct Connect/Interconnect).
- Shape LAN/WLAN modernization (intentbased/SDAccess, WiFi 6/6E/7) and campus segmentation with identityaware policies.
- Lead PoCs and solution validation; create BOMs/BOQs, migration runbooks, fallback plans, test/UAT approaches and acceptance criteria.
- Partner with OEMs and Telcos; evaluate NaaS constructs and commercials; contribute to makevsbuy decisions.
- Embed observability and AIOps; specify telemetry, synthetics, and experience metrics (e.g., XLA) and define SLOs/SLIs.
- Industrialize network automation (Ansible/Terraform, pipelines, IaC/GitOps), golden configs and compliance guardrails.
- Contribute to pursuits (RFI/RFP/Orals), solution narratives, effort/cost models and risk registers; ensure solution governance and signoffs.
- Provide architecture oversight into delivery; guide transition, cutovers, hypercare and handover; coach architects/engineers.
- Author reusable patterns/accelerators and knowledge assets for the practice; evangelize frameworks and best practices.
Qualifications:
Mandatory Skills Experience:
- 12 18+ years in networking with 6+ years as an architect delivering global programs (>200 sites or equivalent scale).
- Proven track record leading assessments, roadmaps, designs and migrations for SDWAN/SASE and campDC modernization. Experience in multivendor, multisupplier environments; comfortable with Guardian/Service Integration models.
- Consulting orientation with strong clientfacing communication, storytelling and executive presentation skills.
Education & Certifications:
Bachelor s degree in engineering/technology (or equivalent experience).
One or more vendor/industry certifications: CCNP/CCIE, JNCIP/JNCIE, PCNSE, Fortinet NSE 7/8, ZIA/ZCCP, AWS Advanced Networking Specialty, Microsoft Azure Network Engineer Associate, TOGAF/ITIL (preferred).
Technical Skills:
- Deep architecture expertise in two or more SDWAN stacks (e.g., Cisco Viptela/Meraki, Aruba EdgeConnect, Versa, Fortinet, Palo Alto/Prisma, Juniper).
- Handson design of SASE components (SWG, CASB/DLP, ZTNA, FWaaS) with vendors such as Zscaler, Netskope, Palo Alto, Fortinet, Cisco, or Cloudflare.
- Cloud networking across AWS/Azure/Google Cloud Platform (Transit/HubandSpoke, vWAN, Route Server, TGW, NCC), DNS/DHCP/IPAM (e.g., Infoblox) and identityaware segmentation.
- Campus & DC networking (EVPN/VXLAN, SDA/ACI or equivalent), Wireless (WiFi 6/6E/7), NAC/802.1X.
- Automation and IaC (Ansible, Terraform, Git, CI/CD) and scripting (Python/Bash) to codify design, config and operational workflows.
- Observability & Digital Experience Monitoring (e.g., ThousandEyes, AppNeta, Datadog, Dynatrace) and NPM/NPMD stacks; capacity and performance engineering.
- Security fundamentals: ZeroTrust architectures, micro/macrosegmentation, certificate/PKI, encryption, BCP/DR for networks.
- Understanding of OT/Industrial networks and Private 5G/LTE (nicetohave) for shopfloor and edge scenarios.
Desired Skills
- Customer focus and ownership mindset; ability to balance value, risk and cost.
- Collaborative leadership across architecture, engineering, security and operations.
- Structured problemsolving; crisp writing; ability to create compelling solution narratives.
Success Measures / KPIs
- Solution quality and governance (architecture checkpoints passed, deployment exceptions).
- Pursuit impact (win rate/shortlists, solution scoring, commercial hygiene).
- Migration outcomes (cutover success rate, MTTR, performance uplift, XLA improvements).
- Automation and standardization (golden configs/templates; % infra as code).