Enterprise Network Architect - Infrastructure & DDI

Thakral One; Bengaluru; On-site; INR 4,000,000 - 8,000,000; Full time

Job summary

Thakral One in Bengaluru is seeking an experienced Enterprise Network Architect to design and oversee secure, scalable infrastructure across regional offices and data centers.

You will own SD-WAN integration across Americas/EMEA/APAC, define HA strategies, and work with security teams on firewall and policy routing. Deep hands-on Cisco routing/switching, WLC, Infoblox DDI, ISE/NPS identity services, and BGP/OSPF knowledge are essential.

Qualifications

• 15+ years of enterprise network engineering/architecture experience.
• Proven multi-site, multi-region network design expertise.
• Strong understanding of 802.1X, EAP-TLS, RADIUS, cert-based authentication.
• Experience with SD-WAN solutions (Cisco SD-WAN/Meraki/Viptela).

Responsibilities

• Architect and document enterprise LAN/WAN infrastructure including core/access switching and WAN edge routing.
• Design and implement SD‑WAN architecture with multi‑region integration.
• Define HA, redundancy, and failover strategies across routing, switching, and WAN links.
• Design and standardize Wi‑Fi networks and integrate identity-based VLAN assignment.
• Architect and deploy Infoblox DDI solutions and integrate DHCP/DNS with IPAM and AD.
• Collaborate with security teams on firewall integration and policy routing.

Skills

Enterprise network design

SD-WAN design

Cisco routing/switching

Network security and policy

Documentation

Stakeholder collaboration

WLC/Wi-Fi 6

DNS/DHCP/IPAM

IP addressing/subnet design

BGP/OSPF/HSRP/VRRP

Tools

Infoblox

Cisco IOS-XE

Cisco ISE

NPS/AD integration

Job description

Job Openings Enterprise Network Architect - Infrastructure & DDI

About the job Enterprise Network Architect - Infrastructure & DDI

As an Enterprise Network Architect – Infrastructure & DDI, you will design and oversee the implementation of secure, scalable, and regionally integrated network infrastructure across offices. This strategic role combines deep technical expertise with hands‑on design ownership, ensuring enterprise connectivity, resilience, and compliance.

What You'll Do and How You'll Succeed

• Architect and document enterprise LAN/WAN infrastructure including core/access switching (Cisco C9300/C9200), WAN edge routing (Cisco C8300/C8200), VLANs, and IP segmentation.
• Design and implement SD‑WAN architecture with multi‑region integration (Americas, EMEA, APAC).
• Define HA, redundancy, and failover strategies across routing, switching, and WAN links.

Wireless & Access Infrastructure

• Design and standardize Wi‑Fi networks (Cisco Catalyst 9100, 9800 WLC).
• Integrate identity‑based VLAN assignment using Cisco ISE/NPS with 802.1X/EAP‑TLS.
• Optimize wireless coverage, RF planning, and dynamic AP load balancing.

DDI (DNS, DHCP, IPAM)

• Architect and deploy Infoblox DDI solutions (Grid Master/Members, HA).
• Integrate DHCP/DNS services with IPAM, ISE, and Active Directory.
• Define IP address management schema, subnet design, and discovery policies.

Security & Policy Integration

• Collaborate with security teams on firewall integration and policy routing.
• Implement secure dynamic VLANs and posture‑based access via Cisco ISE.
• Define network zoning, segmentation, and east‑west traffic controls.

Documentation & Standards

• Produce HLDs, LLDs, implementation plans, and As‑Built documentation.
• Establish configuration standards, naming conventions, and operational runbooks.

We'd Love to Hear From You If...

Experience

• You have 15+ years of enterprise network engineering/architecture experience.
• You have proven expertise in designing multi‑site, multi‑region enterprise networks.
• You have strong understanding of 802.1X, EAP‑TLS, RADIUS, and certificate‑based authentication.
• You have experience with SD‑WAN solutions (Cisco SD‑WAN/Meraki/Viptela preferred).

Technical Expertise

• You have deep hands‑on expertise with Cisco enterprise routing/switching (Catalyst 9K, IOS‑XE).
• You are skilled with Cisco WLCs (9800 series) and Wi‑Fi 6 APs.
• You have experience with Cisco ISE or Microsoft NPS for identity‑based access.
• You are proficient with Infoblox or similar DNS/DHCP/IPAM solutions.
• You know BGP, OSPF, HSRP, VRRP, and Policy‑Based Routing.

Ways of Working

• You demonstrate strong documentation and presentation skills.
• You lead design workshops and interface effectively with global stakeholders.
• You are proactive, structured, and capable of driving complex technical decisions.

Preferred Certifications

• CCNP Enterprise or CCIE (Routing & Switching / Enterprise Infrastructure).
• Infoblox Core DDI Certified (CDCA/CDIA).
• Cisco Certified Specialist – Enterprise Wireless Design.
• Microsoft or Cisco security certifications (advantage).