ARCHITECT - Advanced Networking Domain

Happiest Minds•Orlando, FL

About The Position

We are looking for an experienced Network & Security Architect to design, implement, and govern secure, highly available network architectures across on-premises data centers and cloud environments. The role requires hands-on and architectural expertise across enterprise networking, firewalls, cloud networking, security controls, VPN/SD-WAN, load balancing, and hybrid connectivity. The architect will work closely with infrastructure, cloud, cybersecurity, application, and operations teams to deliver scalable and secure solutions.

Requirements

10–15+ years of experience in enterprise networking and security.
3–5+ years of experience in architecture/design roles.
Strong hands-on and architectural expertise across enterprise networking, firewalls, cloud networking, security controls, VPN/SD-WAN, load balancing, and hybrid connectivity.

Responsibilities

Design enterprise LAN, WAN, WLAN, and data-center networking solutions, including routing, switching, segmentation, redundancy, and high availability.
Design and review BGP, OSPF, VLAN, VRF, NAT, DNS, and DHCP solutions.
Develop network topology diagrams and High-Level Designs (HLD) and Low-Level Designs (LLD).
Conduct capacity planning and recommend network performance improvements.
Design secure network architectures for Microsoft Azure and/or AWS and hybrid connectivity using technologies such as Azure ExpressRoute, AWS Direct Connect, Site-to-Site VPN, and SD-WAN.
Design cloud network segmentation using VNets/VPCs, subnets, route tables, security groups/NSGs, and cloud firewalls.
Define connectivity patterns between on-premises data centers, cloud environments, SaaS platforms, and remote locations.
Support cloud migrations and transformation programs from a network and security perspective.
Architect and govern Next-Generation Firewall (NGFW) solutions, such as Palo Alto Networks, Fortinet, Cisco, or Check Point.
Design network security controls covering firewall policies, segmentation and micro-segmentation, IDS/IPS, web/application filtering, remote-access VPN, site-to-site VPN, and Zero Trust Network Access (ZTNA).
Review firewall rules and network security architecture for security, performance, and operational risks; incorporate Zero Trust principles into hybrid infrastructure designs.
Develop SD-WAN and SASE architectures; evaluate connectivity and security platforms against business, technical, and operational requirements.
Design secure branch-office and remote-user connectivity, ensuring resiliency through multiple carriers, redundant network paths, and appropriate failover mechanisms.
Develop network security architecture aligned with organizational policies and frameworks such as NIST and ISO 27001.
Work with cybersecurity teams on vulnerability remediation, security monitoring, and risk mitigation; participate in security architecture reviews and technical risk assessments.
Ensure solutions meet applicable customer, regulatory, and compliance requirements.
Act as the design authority and subject-matter expert for network and network-security solutions; review designs proposed by engineering teams, vendors, and service providers.
Define technical standards, reference architectures, design principles, and best practices.
Provide technical guidance during major incidents and complex network/security problems; conduct Root Cause Analysis (RCA) for significant or recurring infrastructure incidents.
Mentor network and security engineers.