Network Engineer

Ampstek; Lyon; Sur place; EUR 85 000 - 110 000; Plein temps

Résumé du poste

Ampstek in Lyon, France seeks an experienced Network Architecture, Strategy & Design Authority to shape enterprise network designs across on-premise, data centre and cloud environments. You will drive security-centric architecture and governance for complex, multi-site deployments.

Lead technical design decisions for campus, data centre, WAN, WLAN and cloud connectivity, ensuring robust, scalable, and compliant solutions while aligning with enterprise standards.

Qualifications

• Strong experience designing enterprise-scale network architectures across Campus, Data Centre, WAN, WLAN, Cloud and Hybrid Connectivity.
• Ability to define architecture principles, standards, patterns and target-state designs.
• Strong understanding of enterprise network resilience, scalability, segmentation, performance and operational supportability.

Responsabilités

• Architecture Definition: Define target network architectures for on-premise, data centre, campus, WAN, WLAN, cloud and hybrid connectivity environments.
• Design Authority: Act as a technical design authority for network infrastructure projects, ensuring robust, secure and scalable solutions.
• Architecture Governance: Review and validate high-level designs, low-level designs, migration approaches and implementation choices.
• Technology Roadmap: Contribute to evolution of routing, switching, SD-WAN, WLAN, cloud networking and firewalling.
• Security-by-Design: Integrate security requirements into network architecture including segmentation, VPN, firewalling and cloud connectivity.

Connaissances

Enterprise networks

WAN & SD-WAN

Routing & Switching

Security architecture

Cloud networking

Outils

Cisco ACI

Fortinet/FortiManager/FortiGate

Palo Alto Firewall

Aruba Central

Zscaler

Description du poste

1. Network Architecture, Strategy & Design Authority

• Architecture Definition: Define target network architectures for on-premise, data centre, campus, WAN, WLAN, cloud and hybrid connectivity environments.
• Design Authority: Act as a technical design authority for network infrastructure projects, ensuring that proposed solutions are robust, secure, scalable and aligned with enterprise standards.
• Architecture Governance: Review and validate high-level designs, low-level designs, migration approaches, technical patterns and implementation choices proposed by engineering or project teams.
• Technology Roadmap: Contribute to the evolution of the network technology roadmap, including routing, switching, SD-WAN, WLAN, cloud networking, firewalling, segmentation and automation.
• Standardisation: Define and maintain network architecture standards, reference designs, design principles and reusable technical patterns across Groupe SEB’s global environments.

2. Network Security & Compliance Architecture

• Security-by-Design: Integrate security requirements into network architecture, including segmentation, filtering, access control, VPN, firewalling, cloud connectivity and secure remote access.
• Firewall & Security Architecture: Define architectural principles and target designs for Palo Alto, Fortinet/FortiManager/FortiGate, vRouters and related security platforms.
• Regulatory Alignment: Ensure network architecture takes account of regulatory and security requirements, including NIS 2-related resilience, traceability, segmentation and operational control expectations.
• Risk Management: Identify architecture risks, technical debt, non-standard implementations and resilience gaps; propose mitigation plans and prioritised remediation actions.
• Operational Security: Work with cybersecurity and operations teams to ensure that network designs can be monitored, operated, audited and maintained securely.
• Campus & WLAN Architecture: Define architecture standards for Cisco and Aruba-based LAN/WLAN environments, including switching, wireless access, VLAN design, STP, Radius integration and access policies.
• Data Centre Architecture: Provide architecture expertise for data centre network environments, including Cisco technologies, Cisco ACI and complex routing designs.
• WAN / SD-WAN Architecture: Define and govern WAN and SD-WAN architectures, including dynamic routing, connectivity models and integration across global sites.
• Dynamic Routing: Provide architectural guidance on routing protocols such as BGP and OSPF across multi-technology environments including Cisco, Aruba, Fortinet, Palo Alto and public cloud platforms.
• Cloud Networking: Support the design of secure and resilient connectivity between on-premise environments and public/private cloud platforms, including Azure and AWS.
• DDI Integration: Define architectural principles for DDI services, including Efficient IP integration, IP addressing, DNS/DHCP design and operational dependencies.
• Network as Code Strategy: Define architecture principles for automated network deployment, configuration management, compliance checking and repeatable infrastructure delivery.
• Automation Governance: Support the industrialisation of network build and change processes through automation tooling, including potential use of Cisco Catalyst Center and other orchestration platforms.
• Monitoring Architecture: Define monitoring requirements, key metrics, alerting principles and observability expectations for network services.
• Operational Readiness: Ensure that monitoring, logging, performance indicators and support procedures are included in network architecture deliverables before production release.
• Tooling Alignment: Work with engineering and operations teams to align network tooling with architecture principles, operational requirements and security expectations.

5. Project Support, Technical Leadership & Transition to RUN

• Architecture Support to Projects: Provide architecture support to deployment, migration, security and transformation projects across global network infrastructures.
• Technical Leadership: Guide network engineers and project teams on complex design decisions, particularly around Cisco ACI, dynamic routing, SD-WAN, segmentation, firewalling and cloud connectivity.
• Design Documentation: Produce and validate architecture documentation, including high-level designs, architecture decision records, network diagrams, design standards and technical principles.
• Transition to RUN: Ensure that solutions are production-ready by validating runbooks, DEX documentation, operational procedures, support models and knowledge transfer materials.
• International Enablement: Support and guide local IT teams during deployment, migration or transformation phases, ensuring consistent understanding of the target architecture.
• Technical Committees: Participate in architecture boards, technical committees, steering committees and project governance forums.
• Project Tracking: Contribute to technical planning, dependency tracking and delivery governance using tools such as Jira.

Required Profile & Skills

Technical Expertise

• Strong experience designing enterprise-scale network architectures across Campus, Data Centre, WAN, WLAN, Cloud and Hybrid Connectivity environments.
• Ability to define architecture principles, standards, patterns and target-state designs.
• Strong understanding of enterprise network resilience, scalability, segmentation, performance and operational supportability.

Routing, Switching & WLAN

• Deep knowledge of Cisco environments across Campus and Data Centre domains.
• Strong understanding of Aruba network environments, including Aruba Central, switch deployment, Wi-Fi access points and standard network protocols.
• Excellent knowledge of STP, VLANs, IP addressing, Radius, routing, switching and network access control principles.

Dynamic Routing, WAN & SD-WAN

• Strong architectural understanding of WAN and SD-WAN models.
• Advanced knowledge of BGP and OSPF.
• Ability to design and govern routing across multi-vendor and multi-environment landscapes, including Cisco, Aruba, Fortinet, Palo Alto and Azure/AWS cloud environments.

Network Security & Firewalling

• Strong understanding of security architecture principles applied to network infrastructure.
• Good knowledge of Fortinet technologies, including FortiManager and FortiGate architecture and integration principles.
• Good knowledge of Palo Alto firewalling and traffic filtering design.
• Ability to define secure connectivity models, filtering principles, segmentation patterns, VPN architecture and cloud security integration.

Data Centre & Advanced Network Technologies

• Strong understanding of Cisco ACI architecture and data centre network design.
• Ability to provide guidance on complex routing, segmentation and data centre interconnect scenarios.
• Knowledge of F5 load balancing concepts would be an advantage.
• Knowledge of Zscaler proxy architecture would be an advantage.

DDI, Monitoring & Tooling

• Solid understanding of DDI architecture, ideally with Efficient IP.
• Ability to define IP addressing, DNS/DHCP integration and dependency models.
• Experience defining network monitoring, observability and operational-readiness requirements.
• Familiarity with network automation, configuration governance and Network as Code approaches.
• Knowledge of Cisco Catalyst Center automation capabilities would be beneficial.

Soft Skills & Languages

Mandatory English – Fluent

• Fluent written and spoken English is essential for operating in an international context.
• Ability to write clear architecture documentation, design principles, decision records and technical standards in English.
• Ability to collaborate with local IT teams and global stakeholders across multiple countries.