Network Architect

Network Architect – Cloud & Hybrid Connectivity (Short Term : 3 months contract)

Role Overview
We are seeking an experienced Network Architect with deep expertise in Microsoft Azure and similar, Fortinet technologies and similar, and hybrid network architectures. The role involves designing, reviewing, and governing secure, scalable, and resilient network solutions across cloud and on-premises environments, while collaborating with partners and application teams.

Key Responsibilities
Architecture & Design
• Design end-to-end network architectures for Azure landing zones aligned with best practices (CAF, Well-Architected Framework).
• Define hybrid connectivity models (Site-to-Site VPN, ExpressRoute, SD-WAN integration).
• Architect secure network topologies including hub-spoke, Virtual WAN, and segmented environments.
• Design and implement high availability and disaster recovery strategies for network components.

Azure Networking
• Design and manage Azure networking components:
o Virtual Networks (VNet), Subnets, NSGs, UDRs
o Azure Firewall, Application Gateway (WAF), Load Balancers
o Private Endpoints, Service Endpoints
o DNS (Private & Public), Traffic Manager, Front Door
• Define Zero Trust network architecture within Azure environments.
• Ensure secure connectivity patterns for PaaS and IaaS workloads.

Security & Firewalls
• Design and implement security architectures using:
o Fortinet (FortiGate, FortiManager, FortiAnalyzer) and similar product.
o Azure Firewall (Standard/Premium)
• Define firewall rule policies, segmentation, and threat protection strategies.
• Integrate with SIEM/SOC solutions and security monitoring tools.

SD-WAN & Remote Connectivity
• Design and implement SD-WAN solutions using Fortinet or equivalent technologies.
• Define secure remote access strategies:
o VPN (IPSec / SSL VPN)
o Zero Trust Network Access (ZTNA)
• Optimize traffic routing, failover, and performance across distributed environments.

Application & Network Review
• Perform application onboarding assessments from a network perspective.
• Review application architectures for:
o Connectivity requirements
o Latency sensitivity
o Security exposure
• Define network requirements for application migration to Azure.

Partner & Stakeholder Management
• Collaborate with technology partners, vendors, and system integrators.
• Act as a technical point of contact for network-related discussions with customers.
• Review partner designs and ensure compliance with architecture standards.
• Support pre-sales activities, including solution design and estimations.

Operations & Governance
• Define network standards, policies, and governance frameworks.
• Conduct architecture reviews and audits for compliance and optimization.
• Troubleshoot complex network issues across hybrid environments.
• Provide L3/L4 escalation support when required.

Required Skills & Experience
Technical Skills
• Strong expertise in Azure networking and cloud architecture.
• Hands-on experience with:
o Azure Firewall and Fortinet firewalls
o Hybrid connectivity (VPN, ExpressRoute)
o SD-WAN solutions
• Deep understanding of:
o TCP/IP, BGP, DNS, routing, NAT
o Network security principles and Zero Trust models
• Experience with network monitoring and logging tools.

Azure-Specific Knowledge
• Azure Landing Zones (CAF framework)
• Azure Virtual WAN
• Private Link and service integration
• Network security in PaaS environments

Soft Skills
• Strong communication and stakeholder management skills.
• Ability to translate business requirements into technical designs.
• Experience working with partners and cross-functional teams.
________________________________________
Preferred Qualifications
• Microsoft Certifications (e.g., Azure Solutions Architect Expert)
• Fortinet Certifications (e.g., NSE 4/5/6/7)
• Experience with multi-cloud environments (AWS/OCI is a plus)
• Experience with Infrastructure as Code (Terraform, Bicep)
________________________________________
Additional Responsibilities (Nice-to-Have but Valuable)
• Experience with Kubernetes networking (AKS, ingress controllers).
• Knowledge of DevSecOps and CI/CD integration for network/security policies.
• Experience with DDoS protection strategies and implementation.
• Familiarity with SASE architectures.
• Cost optimization strategies for Azure networking components.
________________________________________
Experience Required
• 8–15 years in networking, with at least 4–6 years in cloud (Azure preferred).
• Proven experience in architecture/design roles (not just operations).