Enterprise Network Architect

Network Architect Job Description

Our company seeks a skilled Senior Network Architect to lead the strategy, design, and implementation of our enterprise-wide network infrastructure. This role requires a perfect blend of technical expertise, leadership, and project delivery skills, with a focus on cloud connectivity, network security, segmentation, and emerging technologies.

Key Responsibilities:

• Lead the end-to-end design of enterprise network architecture, including cloud, data center, campus, OT, encompassing LAN, WAN, WLAN, SD-WAN, and cloud networking that aligns with business objectives.
• Develop High-Level Design (HLD) and Low-Level Design (LLD) documents along with Bill of Materials (BOM) and Bill of Quantities (BOQ).
• Evaluate and integrate emerging technologies to enhance network performance and security.
• Design and implement macro and micro segmentation, next-generation firewall architectures, and secure SD-WAN topologies.
• Architect cloud networking and security solutions using Transit Gateway, VPC peering, Azure Firewall, etc.

Project & Program Management:

• Lead the technical delivery of complex networking projects including cloud integration, OT segmentation, secure remote access, and SD-WAN rollouts.
• Own project lifecycle from requirement gathering and solutioning to handover and documentation.
• Define capacity planning models to forecast bandwidth, throughput, and resource utilization.
• Oversee the deployment of network solutions, ensuring minimal disruption to business operations.
• Ensure compliance with industry standards and organizational policies during implementation

Technology Evaluation, POCs, RFPs & RFIs:

• Evaluate and recommend new technologies, platforms, and OEMs through competitive assessments, RFI/RFP, and Proof of Concept (POC).
• Drive strategic network transformation initiatives by selecting the most appropriate solutions based on TCO, scalability, and regulatory needs.
• Design and enforce network security protocols to protect organizational data and resources.
• Ensure compliance with relevant regulations and standards (e.g., ISO 27001, NIST).

Leadership & Vendor Management:

• Lead and mentor a cross-functional team of engineers, architects, and project managers.
• Manage technical engagements with vendors and partners ensuring alignment with architecture standards and service levels.
• Collaborate with cybersecurity, infrastructure, operations, and compliance teams to maintain enterprise governance.
• Manage and monitor vendor-driven agreed SLAs based parameter set

Security, Cloud & OT Integration:

• Architect secure IT and OT connectivity using Zero Trust models, EDR/XDR, NAC, and network segmentation.
• Design and enforce network security protocols to protect organizational data and resources.
• Design resilient OT networks that meet ISA/IEC 62443, NIST, and GxP compliance standards.
• Collaborate with the security team to address vulnerabilities and implement mitigation strategies.

Stakeholder Communication & Presentation:

• Present technical solutions, risks, roadmaps, and architecture proposals to leadership, including CIO, CISO, and steering committees.
• Translate business goals into network design and infrastructure strategy.
• Maintain detailed documentation of network configurations, processes, and procedures
• Provide training and mentorship to junior network staff and other stakeholders.

Qualification: Bachelor's/Master's in Computer Science, Engineering, or IT Specific Certification : CCNP/CCIE, PCNSE, AWS/Azure Network Specialty, CISSP, TOGAF, PMP/ITIL v4 Experience : 10-12 years experience Skill (Functional & Behavioural):

• Networking: BGP, OSPF, VXLAN, SD-WAN, MPLS, 5G/6G, WAN Optimization
• Cloud Networking: AWS Transit Gateway, Azure VNet, ExpressRoute, Direct Connect, NSG/UDR
• Security: NGFWs (Palo Alto, Fortinet, Cisco), ZTNA, CASB, Zscaler/Netskope, EDR/XDR (CrowdStrike, Defender), NAC
• Segmentation: Micro and macro segmentation, VRFs, SGTs, VLANs
• OT Networking: Industrial firewalling, SCADA/PLC segregation, ICS/OT security policies

---