Architect, Network - R01568817

Architect, Network Primary Skills Meraki Wireless, Cisco - Routing and Switching, Cisco SAN, Cisco Firewall Job requirements Required Technical experience • Strong understanding of AWS networking and security services, including VPC, subnets, route tables, NAT Gateway, Internet Gateway, Transit Gateway, Direct Connect, VPN, Load Balancers, Route 53, Security Groups, NACLs, IAM, KMS, CloudWatch, CloudTrail, AWS Config, GuardDuty, Security Hub, WAF, Shield, Network Firewall, and VPC Flow Logs. • In-depth knowledge of IP networking, TCP/IP, DNS, routing protocols, load balancing, firewall technologies, proxy, WAF, VPN, segmentation, hybrid connectivity, and network troubleshooting. • Experience assessing enterprise firewall platforms, security policies, routing tables, NAT rules, access control rules, VPN tunnels, Direct Connect circuits, proxy configurations, certificates, and secure ingress/egress designs. • Experience with OpenShift and Kubernetes network concepts, including ingress, egress, routes, services, network policies, service mesh concepts, container networking, registry access, image security, RBAC, and platform security controls. • Experience reviewing Kafka network and security architecture, including broker communication, client connectivity, TLS, authentication, authorization, replication traffic, cross-zone connectivity, failover, and DR considerations. • Experience assessing Oracle connectivity and security architecture, including listener access, network paths, encryption, firewall rules, backup and replication traffic, Data Guard connectivity, performance dependencies, and DR readiness. • Knowledge of zero trust principles, least privilege access, identity-aware access, secrets management, certificate lifecycle, encryption, vulnerability management, threat detection, audit logging, and security control validation. • Experience with monitoring, observability, and security logging across network devices, firewalls, load balancers, cloud services, containers, databases, messaging platforms, and SIEM platforms. • Ability to evaluate high availability, disaster recovery, RTO/RPO, redundant network paths, failover testing, route convergence, backup connectivity, and operational resilience across hybrid environments. • Ability to analyze network capacity, performance, latency, throughput, firewall utilization, load balancer health, VPN tunnel stability, Direct Connect bandwidth, and cloud network scaling risks. • Familiarity with infrastructure as code, network automation, policy as code, CI/CD, configuration management, and tools such as Terraform, Ansible, CloudFormation, Jenkins, GitHub Actions, or similar platforms. • Ability to inspect architecture diagrams, network flow diagrams, firewall rule exports, routing tables, security policies, operational dashboards, incident history, change records, runbooks, and technical documentation to validate current-state maturity. • Ability to create assessment reports, risk registers, traffic flow maps, security findings, dependency maps, maturity scorecards, target-state recommendations, and prioritized remediation roadmaps. • Strong analytical thinking, structured problem-solving, communication, facilitation, and security risk articulation skills. • Self-motivated, independent, detail-oriented, and able to work as an accountable team member in a fast-paced assessment engagement. Preferred / Nice to Have • AWS certification such as AWS Certified Advanced Networking – Specialty, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional or Associate. • Network or security certifications such as CCNP, CCIE, CISSP, CISM, CompTIA Security+, or equivalent enterprise networking/security certification. • Red Hat OpenShift, Kubernetes, cloud-native networking, or container security certification. • Experience with application modernization, migration assessment, network segmentation assessment, security posture assessment, cloud readiness assessment, or application portfolio rationalization. • Experience with enterprise observability, SIEM, vulnerability, and network monitor