Principal Cloud Network Architect

Roles and Responsibilities:

Network Infrastructure Engineer/Architect are key interfaces to Clients engineering) teams and are responsible for developing technical solutions. This requires working closely with Internal and external teams to architect the solutions. 

The job role requires sound technical knowledge, proven business acumen, and differentiating client interfacing ability. Infra engineers must anticipate, create, and define an innovative technical solution that matches the customer's needs that are  tactical and strategic requirements. 

Configuration and Troubleshooting Responsible for planning, designing, integrating, and driving large-scale AWS & On-Prem networking including AWS control tower, SDN using Cisco ACI, connectivity, routing, firewall using Palo-Alto and AWS WAF,, load-balancer using F5 and AWS load balancers,. Act as a final contact in networking for any technical issue for the engineering teams. Drive Critical/Major incidents and be involved in RCA preparations. Responsible for planning and capacity management of network infrastructure. Responsible for implementing DR & Chaos engineering solutions and performing periodic tests. Responsible for addressing performance and replication-related issues. 

• Provide multi-level technical support in defining, developing, and evaluating network products to meet needs.
• Building a network for an enterprise-wide cloud-native platform and the tooling that surrounds it, that will be adopted by engineering teams across various business units.
• This role offers the opportunity to combine architecture definition with hands-on build and operate work as part of initiatives and operations 
• Act as an Infra security architect/SME for network infrastructures and perimeter security technologies such as firewalls, load balancers, WAF, proxies, SDN, DNS, and DDOS solutions 
• Provides leadership and work guidance to less experienced personnel
• Hands-on: Firewalls (Palo Alto, Cisco, Checkpoint), Load Balancers (F5,), AWS Networking, Wireless (Aruba) Build and manage AWS Network features for Enhanced Networking like VPC, API 

• Manage Network adopting DevOps/SRE principles. Own the design, low-level engineering, and delivery of new hardware systems for applications across the network Support these activities by diagnosing, reproducing, and fixing software and hardware issues on enterprise Data Centre Networking, WAN, Links & Public cloud infrastructure technologies 
• Ensure business continuity by defining and implementing operational Recovery Time Objective (RTO) and Recovery Point Objective (RPO) strategies for all Network Infrastructure areas 
• Evaluate and ensure changes are adhering to appropriate operating procedures; recommend revisions or changes based on results 

• Create a real-time contextual living map of network with detailed network specifications, including diagrams, equipment configurations with defined standards
• Bring in the practice of Network As Code on all current network devices and new implementations - Write Once, Execute Anywhere 
• Improve the reliability of the service, bring in proactiveness to identify and prevent impact to customers by eliminating Single Point of Failure (SPOF) 
• Capture critical forensic data, and provide complete visibility across the enterprise, for security incidents as soon as a threat is detected, by implementing tools like NetBrain

Must Have Skills:

 Industry certifications in networking in Routing, Switching, Security desired

•  14+ years experience in Network operational support (at least 7+ in a large enterprise or carrier space) 
• Experience in design and management of Cloud and Hybrid cloud infrastructure, rearchitecting the DC environment to synergise with AWS cloud and modernizing the NW landscape is required.
• Should have experience in AWS Control Tower and networking: Automates Landing Zone creation, SCPs, OU structuring, baseline guardrails
• Should have experience in handling Landing Zone: Multi-account structure with VPCs, networking, logging, audit accounts.
• Should have hands-on experience in Core AWS Networking: ( VPC, API Gateway, Transit Gateway, Direct Connect, Private Link, Cloud WAN)
• Solid understanding of OSI model, routing and switching protocols, network security, IPv4 and IPv6 networking, subnetting, and operational experience 
• Should have hands-on experience with Cisco ACI and leaf and spine network architecture
• Should have strong hands-on experience with firewalls such as Palo-Alto and load balancers, GTM and LTM with F5.
• Should have a good understanding of how to secure internal subnets against external Internet traffic by utilizing different technologies such as load balancers, firewalls, DMZ zoning, and VLAN segregation 
• Experience in implementing automation in Cloud environments Ability to mentor and train internal technical teams 
• Supports application developers and identifies/solves configuration and environment issues related to the network.
• Knowledge of security technologies such as SIEM, Firewall, DLP and hybrid/Cloud Security environments 
• Will have considerable AWS and Linux skills, as well as DevOps skills around CI/CD and experience with tools such as GitLab (deploying using runners, etc.)

Qualification:

• Bachelor’s degree in Computer Science Engineering, or a related technical degree.

Location:

• Bangalore