Key responsibilities
Network architecture & design
• Architect hub-and-spoke and vWAN topologies across multi-subscription environments.
• Implement Azure Route Server (ARS) to simplify dynamic route exchange between VNets and network virtual appliances.
• Design secure connectivity patterns using VNets, peering, UDRs, NSGs, Azure Firewall, Application Gateway, and Load Balancer.
• Integrate virtual appliances such as: • • • Cisco vMX for SD-WAN and secure branch connectivity. Netskope for cloud security and secure web gateway services. SolarWinds for network monitoring, performance management, and observability.
Migration projects
• Lead network architecture and design workstreams for large-scale migration projects, moving on-premises workloads and network topologies into Azure.
• Assess existing on-premises network estates (routing, firewalls, WAN links) and define target-state Azure network designs and migration sequencing.
• Partner with infrastructure, security, and application teams to plan cutover, minimize downtime, and validate connectivity post-migration.
• Produce migration runbooks, network design documents, and as-built documentation for each migration wave.
Required skills & experience Technical expertise
• Deep knowledge of Azure networking services (VNets, ARS, vWAN, NSGs, Azure Firewall, Application Gateway).
• Hands-on experience with virtual appliances (Cisco vMX, Netskope, SolarWinds)
.• Strong understanding of BGP, dynamic routing, and hybrid connectivity.
• Infrastructure as Code (Terraform) with automation.
• Proven experience delivering network architecture for cloud migration projects (on-premises to Azure).
• Working knowledge of IP address planning and CIDR allocation for large, multi-environment Azure landing zones.
Experience & qualifications
• 15+ years of overall networking experience, including extensive experience designing and operating Azure networking at scale.
• Demonstrated experience as a lead or senior architect on at least one large-scale Azure migration engagement.
• Azure certifications preferred: AZ-700 (Azure Network Engineer Associate), AZ-305 (Azure Solutions Architect Expert).
• Vendor certifications a plus: Cisco (CCNP/CCIE), Netskope NCCA/NCCE, or equivalent SolarWinds certifications.
Soft skills • Strong stakeholder communication skills, able to explain network design trade-offs to both technical and non-technical audiences. • Comfortable leading design workshops and producing clear architecture documentation. • Collaborative, cross-functional mindset - works closely with security, infrastructure, and application teams. • Structured, methodical approach to troubleshooting complex, multi-vendor networ
This is a remote position.