Network Architect

Job Title: Network Architect
Location: Irvine, CA
Job Type: Fulltime

Salary Range: $100,000-$140,000 a year

Must Have Technical/Functional Skills
• AWS Networking: Expert proficiency in VPC, Transit Gateway, PrivateLink, CloudFront, and Global Accelerator.
• Routing Protocols: Deep knowledge of BGP, OSPF, and SD-WAN integration.
• Security Tools: Hands-on experience with IAM, KMS, and third-party virtual firewalls (e.g., Palo Alto, Fortinet).
• Automation: Advanced scripting skills in Python (Boto3) or Bash.
• Legacy Integration: Ability to migrate multi-tier legacy applications from on-premises to AWS-native frameworks.
Qualifications
• Experience: 8+ years in enterprise networking, with at least 5 years specifically focused on AWS Cloud Architecture.
Certifications (Required/Preferred):
• AWS Certified Advanced Networking – Specialty (Highly Preferred).
• AWS Certified Solutions Architect – Professional.
• CCIE/CCNP or equivalent professional-level networking certification.
Soft Skills
• Leadership: Experience mentoring junior engineers and leading cross-functional projects.
• Stakeholder Management: Ability to translate complex technical concepts for C-level executives and non-technical stakeholders.
• Problem Solving: Strategic thinker capable of resolving high-stakes architectural challenges and disaster recovery planning.

Roles & Responsibilities
• Architectural Strategy: Design and document enterprise-grade AWS network architectures, including Multi-Account structures using AWS Control Tower and Organizations.
• Hybrid Connectivity: Implement complex hybrid patterns using AWS Direct Connect, Transit Gateway, and Site-to-Site VPN to link global sites with AWS VPCs.
• Security & Compliance: Lead the design of Zero-Trust network frameworks, implementing AWS Network Firewall, WAF, and micro-segmentation through Security Groups and NACLs.
• Automation (IaC): Standardize infrastructure deployment using Terraform or CloudFormation to eliminate manual configuration and ensure reproducibility.
• Network Governance: Establish and enforce standards for IP address management (IPAM), DNS (Route 53), and load balancing (ALB/NLB/GWLB).
• Performance & Observability: Design monitoring solutions using Amazon CloudWatch, VPC Flow Logs, and Traffic Mirroring to proactively identify and resolve bottlenecks.
• Cost Eligible to workimization: Analyze data transfer patterns and architect solutions to minimize AWS egress costs and resource waste.