Senior Network Architect

Network Architect Opportunity

We are seeking a dynamic and forward-thinking Senior Network Architect to lead the strategy, design, and implementation of our enterprise-wide IT and OT network infrastructure. This role requires a perfect blend of technical expertise, leadership, and project delivery skills, with a focus on cloud connectivity, network security, segmentation, and emerging technologies.

This role demands a strategic thinker with a deep understanding of networking technologies, protocols, and best practices to support our organization's evolving needs.

Job Responsibilities:

• Enterprise Network Architecture
• Lead the end-to-end design of enterprise network architecture, including cloud, data centre, campus, OT, encompassing LAN, WAN, WLAN, SD-WAN, and cloud networking that aligns with business objectives.
• Design Documents
• Develop High-Level Design (HLD) and Low-Level Design (LLD) documents along with Bill of Materials (BOM) and Bill of Quantities (BOQ).
• Emerging Technologies
• Evaluate and integrate emerging technologies to enhance network performance and security.
• Security and Segmentation
• Design and implement macro and micro segmentation, next-generation firewall architectures, and secure SD-WAN topologies.
• Cloud Networking
• Architect cloud networking and security solutions using Transit Gateway, VPC peering, Azure Firewall, etc.

Project & Program Management:

• Project Delivery
• Lead the technical delivery of complex networking projects including cloud integration, OT segmentation, secure remote access, and SD-WAN rollouts.
• Lifecycle Management
• Own project lifecycle from requirement gathering and solutioning to handover and documentation.
• Capacity Planning
• Define capacity planning models to forecast bandwidth, throughput, and resource utilization.
• Deployment and Compliance
• Oversee the deployment of network solutions, ensuring minimal disruption to business operations.
• Ensure compliance with industry standards and organizational policies during implementation

Technology Evaluation, POCs, RFPs & RFIs:

• New Technology Assessment
• Evaluate and recommend new technologies, platforms, and OEMs through competitive assessments, RFI/RFP, and Proof of Concept (POC).
• Network Transformation
• Drive strategic network transformation initiatives by selecting the most appropriate solutions based on TCO, scalability, and regulatory needs.
• Network Security
• Design and enforce network security protocols to protect organizational data and resources.
• Regulatory Compliance
• Ensure compliance with relevant regulations and standards (e.g., ISO 27001, NIST).

Leadership & Vendor Management:

• Team Leadership
• Lead and mentor a cross-functional team of engineers, architects, and project managers.
• Vendor Engagement
• Manage technical engagements with vendors and partners ensuring alignment with architecture standards and service levels.
• Governance Collaboration
• Collaborate with cybersecurity, infrastructure, operations, and compliance teams to maintain enterprise governance.
• SLA Management
• Manage and monitor vendor-driven agreed SLAs based on parameters set.

Security, Cloud & OT Integration:

• Secure Connectivity
• Architect secure IT and OT connectivity using Zero Trust models, EDR/XDR, NAC, and network segmentation.
• OT Network Design
• Design resilient OT networks that meet ISA/IEC 62443, NIST, and GxP compliance standards.
• Vulnerability Management
• Collaborate with the security team to address vulnerabilities and implement mitigation strategies.

Stakeholder Communication & Presentation:

• Solution Presentations
• Present technical solutions, risks, roadmaps, and architecture proposals to leadership, including CIO, CISO, and steering committees.
• Business Alignment
• Translate business goals into network design and infrastructure strategy.
• Documentation and Training
• Maintain detailed documentation of network configurations, processes, and procedures.
• Jr. Staff Support
• Provide training and mentorship to junior network staff and other stakeholders.

Requirements:

• Education and Certification
• Bachelor's/Masters in Computer Science, Engineering, or IT.
• Specific Certification
• Specific Certification: CCNP/CCIE, PCNSE, AWS/Azure Network Specialty, CISSP, TOGAF, PMP/ITIL v4.
• Experience
• 10-12 years of experience.

Skill Set:

• Networking Skills
• Networking: BGP, OSPF, VXLAN, SD-WAN, MPLS, 5G/6G, WAN Optimization.
• Cloud Networking Skills
• Cloud Networking: AWS Transit Gateway, Azure VNet, ExpressRoute, Direct Connect, NSG/UDR.
• Security Skills
• Security: NGFWs (Palo Alto, Fortinet, Cisco), ZTNA, CASB, Zscaler/Netskope, EDR/XDR (CrowdStrike, Defender), NAC.
• Segmentation Skills
• Segmentation: Micro and macro segmentation, VRFs, SGTs, VLANs.
• OT Networking Skills
• OT Networking: Industrial firewalling, SCADA/PLC segregation, ICS/OT security policies.

---