Principal Cloud Network Architect @ Nomiso

Roles and Responsibilities:

Network Infrastructure Engineer/Architect are key interfaces to Clients engineering) teams and are responsible for developing technical solutions. This requires working closely with Internal and external teams to architect the solutions.

The job role requires sound technical knowledge, proven business acumen, and differentiating client interfacing ability. Infra engineers must anticipate, create, and define an innovative technical solution that matches the customer's needs and tactical and strategic requirements.

Configuration and Troubleshooting Responsible for planning, designing, integrating, and driving large-scale AWS & On-Prem connectivity, routing, switching firewall, load-balancer, CDN, and solutions. Act as a final contact for any technical issue for the engineering teams. Drive Critical/Major incidents and be involved in RCA preparations. Responsible for planning and capacity management of network infrastructure. Responsible for implementing DR & Chaos engineering solutions and performing periodic tests. Responsible for addressing performance and replication-related issues.

• Provide multi-level technical support in defining, developing, and evaluating network products to meet needs.
• Building a network for an enterprise-wide cloud-native platform and the tooling that surrounds it, that will be adopted by engineering teams across various business units.
• This role offers the opportunity to combine architecture definition with hands-on build and operate work as part of initiatives and operations
• This role will need to work with Operations, Infrastructure, Cybersecurity, and Software Engineering teams to define network solutions for hybrid cloud deployment solutions that will enable the use of Hybrid cloud infrastructure to meet the challenges of technology, regulatory, and security requirements
• Manage Network adopting DevOps/SRE principles. Own the design, low-level engineering, and delivery of new hardware systems for applications across the network Support these activities by diagnosing, reproducing, and fixing software and hardware issues on enterprise Data Centre Networking, WAN, Links & Public cloud infrastructure technologies
• Ensure business continuity by defining and implementing operational Recovery Time Objective (RTO) and Recovery Point Objective (RPO) strategies for all Network Infrastructure areas
• Evaluate and ensure changes are adhering to appropriate operating procedures; recommend revisions or changes based on results
• Act as an Infra security architect/SME for network infrastructures and perimeter security technologies such as firewalls, load balancers, WAF, proxies, SDN, DNS, and DDOS solutions
• Provides leadership and work guidance to less experienced personnel
• Hands-on: Routers/Switches (Cisco & Arista & Brocade), Firewalls (Palo Alto, Cisco, Checkpoint), Load Balancers (F5, Brocade, NGINX), AWS Networking, Wireless (Aruba) Build and manage AWS product features for Enhanced Networking like VPC, API
• Gateway, CloudFront, Route 53, Cloud WAN, Direct Connect, PrivateLink, Transit Gateway, Elastic Load Balancing (ELB), etc.
• Networking technologies: Routing Protocols (BGP, EIGRP & OSPF), VRFs, VLANs, VRRP, LACP, MLAG, TACACS / Rancid / GIT, IPSec VPN, DNS / DHCP, NAT / SNAT, IP Multicast, VPC, Transit Gateway, NAT Gateway, ALB/ELB, Security Groups, ACL, HSRP, VRRP, SNMP, DHCP
• Network configuration automation (Scripting with Perl/Python/Bash/Terraform, Ansible) ? Implementation, Decommission, Upgrades, Updates of switch/route, firewall, LB, etc. ? Keep all network physical equipment and virtual infrastructure up to date with right security patches and plan regular maintenance to keep them up and running ? Manage CDN, Links, VPN technologies, SDN, SDWAN, and Network Function Virtualization (NFV), VXLAN, VRF
• Review technology designs, and architecture, taking local and regional regulatory requirements into account for Voice, Video Solutions, Routing, Switching, VPN, LAN, WAN, Network Security, Firewalls, NGFW, NAT, IPS, Botnet, Application Control, DDoS, Web Filtering
• Understand and apply Palo Alto Firewall / Panorama, Big-IQ, and NetBrain tools/technology standards to daily support and enhance performance, improve reliability

• Create a real-time contextual living map of network with detailed network specifications, including diagrams, equipment configurations with defined standards ? Bring in the practice of Network As Code on all current network devices and new implementations - Write Once, Execute Anywhere
• Improve the reliability of the service, bring in proactiveness to identify and prevent impact to customers by eliminating Single Point of Failure (SPOF)
• Capture critical forensic data, and provide complete visibility across the enterprise, for security incidents as soon as a threat is detected, by implementing tools like NetBrain

Must Have Skills:

Industry certifications in networking in Routing, Switching, Security desired

• 14+ years experience in Network operational support (at least 7+ in a large enterprise or carrier space)
• 7+ years experience with Layer2/3 switching and advanced routing protocols including BGP, OSPF, IS-IS
• Experience with DC architectures, designs, and management in a Cloud and Hybrid Cloud environment
• Experience in design and management of Cloud and Hybrid cloud infrastructure, rearchitecting the DC environment to synergise with AWS cloud and modernizing the NW landscape is required
• Solid understanding of OSI model, routing and switching protocols, network security, IPv4 and IPv6 networking, subnetting, and operational experience
• Should have a good understanding of how to secure internal subnets against external Internet traffic by utilizing different technologies such as load balancers, firewalls, DMZ zoning, and VLAN segregation
• Experience in implementing automation in Cloud environments Ability to mentor and train internal technical teams
• Supports application developers and identifies/solves configuration and environment issues related to the network.
• Knowledge of security technologies such as SIEM, Firewall, DLP and hybrid/Cloud Security environments
• Will have considerable AWS and Linux skills, as well as DevOps skills around CI/CD and experience with tools such as GitLab (deploying using runners, etc.)

Qualification:

• Bachelors degree in Computer Science Engineering, or a related technical degree.