Enterprise Network Architect – Infrastructure & DDI

TOCUMULUS; Bengaluru; On-site; INR 4,500,000 - 6,500,000; Full time

Job summary

TOCUMULUS is seeking an experienced Enterprise Network Architect to design and oversee a secure, scalable network across client offices. You will lead architecture for LAN/WAN, SD-WAN, wireless, routing, switching, NAC, and DDI (DNS/DHCP/IPAM) solutions with hands-on design ownership.

The role requires deep Cisco expertise, multi-region deployment experience, and a strong focus on security and standards. You will collaborate with global stakeholders, document high/low-level designs, and drive

Qualifications

• 15+ years of enterprise network engineering/architecture experience.
• Deep hands-on expertise with Cisco routing and switching (Catalyst 9K, IOS-XE).
• Proven multi-site, multi-region network design experience.
• Strong understanding of 802.1X, EAP-TLS, RADIUS and certificates.
• Experience with SD-WAN solutions (Cisco SD-WAN/Meraki/Viptela).
• Knowledge of Infoblox DNS/DHCP/IPAM.

Responsibilities

• Architect and document enterprise LAN/WAN infrastructure with VLANs and IP segmentation.
• Design and implement SD-WAN across multiple regions (Americas/EMEA/APAC).
• Define HA, redundancy, and failover strategies for routing, switching, and WAN.
• Design Wireless and Access Infrastructure including 802.1X integration.
• Lead DDI deployment and integration with AD, IPAM, and DNS/DHCP.
• Collaborate on security integration, policy routing, and zoning; produce HLDs/LLDs.

Skills

Cisco routing & switching

WLCs (Wi‑Fi 6)

Identity-based access (ISE/NPS)

DNS/DHCP/IPAM (Infoblox)

Routing protocols (BGP/OSPF/HSRP/VRRP)

SD-WAN design (Cisco SD-WAN/Meraki/VIP

Education

15+ years enterprise network experience

Tools

Infoblox DDI

Cisco IOS-XE

Cisco Catalyst 9K

Cisco WLCs (9800)

Job description

We are seeking an experienced Enterprise Network Architect to design and oversee the implementation of a secure, scalable, and regionally integrated network infrastructure across client offices. The candidate will lead architecture for LAN/WAN, SD-WAN, wireless, routing, switching, network access control, and DDI (DNS, DHCP, IPAM) solutions. This is a strategic role that combines deep technical expertise with hands‑on design ownership.

Key Responsibilities

1. Architect and document enterprise LAN/WAN infrastructure including:
   • Core and access switching (Cisco C9300/C9200)
   • Layer 2/3 topology, VLANs, and IP segmentation
2. Design and implement SD-WAN architecture with multi-region integration (Americas, EMEA, APAC)
3. Define HA, redundancy, and failover strategies across routing, switching, and WAN links

Key Responsibilities

1. Network Architecture & Design
   • Architect and document enterprise LAN/WAN infrastructure including:
     • Core and access switching (Cisco C9300/C9200)
     • WAN edge routing (Cisco C8300/C8200)
     • Layer 2/3 topology, VLANs, and IP segmentation
   • Design and implement SD-WAN architecture with multi-region integration (Americas, EMEA, APAC)
   • Define HA, redundancy, and failover strategies across routing, switching, and WAN links
2. Wireless and Access Infrastructure
   • Design and standardize Wi‑Fi networks (Cisco Catalyst 9100, 9800 WLC)
   • Integrate identity-based VLAN assignment using Cisco ISE/NPS with 802.1X/EAP‑TLS
   • Optimize wireless coverage, RF planning, and dynamic AP load balancing
3. DDI (DNS, DHCP, IPAM)
   • Architect and deploy Infoblox DDI solution (Grid Master/Members, HA)
   • Integrate DHCP and DNS services with IPAM, ISE, and Active Directory
   • Define IP address management schema, subnet design, and discovery policies
4. Security & Policy Integration
   • Collaborate with security teams on firewall integration and policy routing
   • Implement secure dynamic VLANs and posture‑based access via Cisco ISE
   • Define network zoning, segmentation, and east‑west traffic controls
5. Documentation & Standards
   • Produce high‑quality HLDs, LLDs, implementation plans, and As‑Built documentation
   • Establish configuration standards, naming conventions, and operational run books

Role Summary

We are seeking an experienced Enterprise Network Architect to design and oversee the implementation of a secure, scalable, and regionally integrated network infrastructure across client offices. The candidate will lead architecture for LAN/WAN, SD-WAN, wireless, routing, switching, network access control, and DDI (DNS, DHCP, IPAM) solutions. This is a strategic role that combines deep technical expertise with hands‑on design ownership.

Requirements

Required Qualifications

• 15+ years of experience in enterprise network engineering/architecture
• Deep hands‑on expertise with:
  • Cisco enterprise routing and switching (Catalyst 9K series, IOS‑XE)
  • Cisco WLCs (9800 series) and Wi‑Fi 6 access points
  • Cisco ISE or Microsoft NPS for identity‑based access
  • Infoblox or similar solution for DNS/DHCP/IPAM
  • BGP, OSPF, HSRP, VRRP, and Policy‑Based Routing
• Proven experience in designing multi‑site, multi‑region enterprise networks
• Strong understanding of 802.1X, EAP‑TLS, RADIUS, and certificate‑based authentication
• Experience with SD‑WAN solutions (Cisco SD‑WAN /Meraki/ Viptela preferred)

Preferred Certifications

• CCNP Enterprise or CCIE (Routing & Switching / Enterprise Infrastructure)
• Infoblox Core DDI Certified (CDCA / CDIA) – preferred
• Cisco Certified Specialist – Enterprise Wireless Design
• Microsoft or Cisco security certifications a plus

Soft Skills & Leadership

• Strong documentation and presentation skills
• Ability to lead design workshops and interface with global stakeholders
• Proactive, structured, and capable of driving complex technical decisions