Enterprise Network Architect – Infrastructure & DDI

Thakral One; Bengaluru; On-site; INR 14,340,000 - 20,076,000; Full time

Job summary

Thakral One seeks an Enterprise Network Architect to design and oversee secure, scalable network infrastructure across offices. The role combines hands-on design ownership with regional integration and governance.

You will lead LAN/WAN, Wi‑Fi, DDI and security integrations, ensuring high availability and standards across global regions. Strong documentation and cross‑team collaboration are essential.

Qualifications

• 15+ years of enterprise network engineering/architecture experience.
• Proven expertise in designing multi-site, multi-region enterprise networks.
• Strong understanding of 802.1X, EAP-TLS, RADIUS, and certificate-based authentication.
• Experience with SD-WAN solutions (Cisco SD-WAN/Meraki/Viptela preferred).

Responsibilities

• Architect and document enterprise LAN/WAN infrastructure including core/access switching.
• Design and implement SD-WAN architecture with multi-region integration.
• Define HA, redundancy, and failover strategies across routing, switching, and WAN links.
• Design and standardize Wi‑Fi networks (Cisco Catalyst 9100, 9800 WLC).
• Integrate DHCP/DNS services with IPAM, ISE, and Active Directory.
• Collaborate with security teams on firewall integration and policy routing.
• Produce HLDs, LLDs, implementation plans, and As‑Built documentation.

Skills

Enterprise networking

Multi-region design

Documentation

Stakeholder management

Technical decision making

Tools

Infoblox

Cisco ISE

NPS

Cisco WLC

DNS/DHCP/IPAM

BGP/OSPF

HSRP/VRRP

SD-WAN

Job description

As an Enterprise Network Architect - Infrastructure & DDI, you will design and oversee the implementation of secure, scalable, and regionally integrated network infrastructure across offices. This strategic role combines deep technical expertise with hands‑on design ownership, ensuring enterprise connectivity, resilience, and compliance.

What You'll Do and How You'll Succeed

• Architect and document enterprise LAN/WAN infrastructure including core/access switching (Cisco C9300/C9200), WAN edge routing (Cisco C8300/C8200), VLANs, and IP segmentation.
• Design and implement SD-WAN architecture with multi-region integration (Americas, EMEA, APAC).
• Define HA, redundancy, and failover strategies across routing, switching, and WAN links.

Wireless & Access Infrastructure

• Design and standardize Wi‑Fi networks (Cisco Catalyst 9100, 9800 WLC).
• Integrate identity‑based VLAN assignment using Cisco ISE/NPS with 802.1X/EAP-TLS.
• Optimize wireless coverage, RF planning, and dynamic AP load balancing.

DDI (DNS, DHCP, IPAM)

• Architect and deploy Infoblox DDI solutions (Grid Master/Members, HA).
• Integrate DHCP/DNS services with IPAM, ISE, and Active Directory.
• Define IP address management schema, subnet design, and discovery policies.

Security & Policy Integration

• Collaborate with security teams on firewall integration and policy routing.
• Implement secure dynamic VLANs and posture‑based access via Cisco ISE.
• Define network zoning, segmentation, and east‑west traffic controls.

Documentation & Standards

• Produce HLDs, LLDs, implementation plans, and As‑Built documentation.
• Establish configuration standards, naming conventions, and operational runbooks.

We'd Love to Hear From You If...

Experience

• You have 15+ years of enterprise network engineering/architecture experience.
• You have proven expertise in designing multi‑site, multi‑region enterprise networks.
• You have strong understanding of 802.1X, EAP-TLS, RADIUS, and certificate‑based authentication.
• You have experience with SD-WAN solutions (Cisco SD-WAN/Meraki/Viptela preferred).

Technical Expertise

• You have deep hands‑on expertise with Cisco enterprise routing/switching (Catalyst 9K, IOS‑XE).
• You are skilled with Cisco WLCs (9800 series) and Wi‑Fi 6 APs.
• You have experience with Cisco ISE or Microsoft NPS for identity‑based access.
• You are proficient with Infoblox or similar DNS/DHCP/IPAM solutions.
• You know BGP, OSPF, HSRP, VRRP, and Policy‑Based Routing.

Ways of Working

• You demonstrate strong documentation and presentation skills.
• You lead design workshops and interface effectively with global stakeholders.
• You are proactive, structured, and capable of driving complex technical decisions.

Preferred Certifications

• CCNP Enterprise or CCIE (Routing & Switching / Enterprise Infrastructure).
• Infoblox Core DDI Certified (CDCA/CDIA).
• Cisco Certified Specialist - Enterprise Wireless Design.
• Microsoft or Cisco security certifications (advantage).

Philippines