Network Architect

Zone IT Solutions; City of Brisbane; On-site; AUD 150,000 - 210,000; Full time

Job summary

Zone IT Solutions in Brisbane is seeking an experienced Network Architect / Senior Network Engineer to lead the design and delivery of global network transformation initiatives across data centers, cloud, and regional hubs.

The role defines the network strategy, architectures, and standards, driving projects that leverage SD-WAN, Cisco vMX, Cisco ISE, Palo Alto, and Prisma Access, while mentoring regional engineers.

Qualifications

• Advanced networking experience across data centers, cloud, and WAN/LAN.
• Experience leading global network transformation programs.
• Strong vendor management and cross-functional collaboration.

Responsibilities

• Define and maintain the global network architecture and roadmap.
• Design end-to-end network solutions covering DC, Cloud, WAN, LAN, and SD-WAN.
• Lead the transition from legacy WAN to SD-WAN across regional hubs and cloud environments.
• Architect and document security and segmentation using Palo Alto, Prisma, and Cisco ISE.
• Define network performance, resilience, and availability standards.

Skills

Core Networking

SD-WAN

Security

Cloud Networking

Monitoring & Automation

Protocols & Standards

Education

Bachelor’s degree

Tools

SolarWinds

ThousandEyes

Statseeker

Ansible

Terraform

Job description

We are seeking an experienced Network Architect / Senior Network Engineer to lead the

design and delivery of global network transformation initiatives across data centers, cloud,

and regional hubs.

The ideal candidate will develop and implement the network strategy and

roadmap, define technical architectures and standards, and drive transformation projects

leveraging modern technologies such as SD-WAN, Cisco vMX, Cisco ISE, Palo Alto, and

Prisma Access.

Key Responsibilities:

• Define and maintain the global network architecture and roadmap, aligning with business and IT strategy.
• Design end-to-end network solutions covering DC, Cloud, WAN, LAN, and SDWAN architectures.
• Lead the transition from legacy WAN to SD-WAN integrating regional hubs, stores, and cloud environments.
• Architect and document network security and segmentation solutions using Palo Alto, Prisma, and Cisco ISE.
• Define network performance, resilience, and availability standards.

Technical Leadership & Delivery

• Lead technical design workshops with customer architects, network teams, and vendors.
• Develop high-level and low-level design documents (HLD/LLD) for global deployments.
• Provide technical leadership and oversight during design, implementation, and migration phases.
• Mentor and guide regional network engineers and ensure design consistency across geographies.
• Evaluate and recommend tools, technologies, and best practices for network automation and observability.

Cloud and Data Center Networking

• Design and integrate on-prem data centers with cloud environments (Azure, AWS, GCP) using secure and optimized connectivity.
• Implement hybrid connectivity leveraging ExpressRoute, Direct Connect, or VPN gateways.
• Collaborate with cloud architects to design secure, scalable, and resilient cloud network.

Security & Compliance

• Integrate network security controls including firewalls, identity-based access, and threat detection.
• Ensure compliance with enterprise security and regulatory standards.
• Define Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) principles in network designs.

Stakeholder Management

• Act as the primary technical contact for network-related initiatives.
• Work closely with customer network managers, architects, and service providers.
• Present architectural decisions and recommendations to CIO-level stakeholders.
• Participate in vendor evaluations, PoCs, and contract discussions.

Required Skills and Experience:

Technical Skills

• Core Networking: Advanced knowledge of routing, switching, VPNs, BGP, OSPF, MPLS, QoS, and multicast.
• Routing & Switching, Security (Firewalls Cisco ASA, FortiGate, PaloAlto and PaloAlto Prisma)
• SD-WAN: Design and deployment experience with Cisco SD-WAN (vManage/vBond/vSmart) or VMX, and familiarity with Prisma SD-WAN.
• Security: Strong understanding of Palo Alto firewalls, Cisco ISE, and Zero Trust / SASE concepts.
• Cloud Networking: Hands-on with Azure, AWS, or GCP network design including hybrid and multi-cloud integration.
• Network Monitoring & Automation: Familiarity with tools such as SolarWinds, ThousandEyes, Statseeker, Ansible, Terraform, or equivalent.
• Protocols & Standards: IPv4/IPv6, DNS, DHCP, SNMP, SSL, IPsec, and network

Experience

10+ years in network engineering, with at least 5 years in an architectural or technical leadership role.

Proven track record in global network transformation programs.

Experience leading multi-region deployments with distributed teams.

Strong vendor management and cross-functional collaboration experience.

Qualifications & Certifications:

Bachelor’s degree in Computer Science, Information Technology, or related discipline.

Preferred Certifications:

• Cisco CCNP / CCIE (Routing & Switching, Security)
• Prisma

Soft Skills:

• Excellent communication and presentation skills for both technical and executive audiences.
• Strong problem-solving and analytical thinking.
• Ability to manage ambiguity and drive clarity in large transformation programs.
• Collaborative leadership style with mentoring abilities