Staff Cloud Network Architect

Aviatrix; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Aviatrix is seeking a Staff Cloud Network Architect in Bengaluru to drive enterprise outcomes in production environments. You will be the primary technical contact, guiding architecture design, deployment oversight, and platform health across multi-cloud deployments.

In this role you will design and validate multi-cloud networks (AWS, Azure, GCP, OCI), implement cloud network security architectures, and lead technical reviews with stakeholders up to the C‑suite, ensuring rapid resolution and

Qualifications

• 8+ years in enterprise or cloud networking in production.
• Expertise across at least two public clouds (AWS/Azure/GCP/OCI).
• Strong knowledge of BGP, SD-WAN, MPLS and hybrid connectivity.
• Experience with network security architectures and Zero Trust.
• Proficient in Python, Terraform or Ansible for automation.
• Experience with monitoring tools (CloudWatch, Datadog, Splunk).
• Familiar with cloud security frameworks (SOC 2, HIPAA, PCI-DSS, NIST).

Responsibilities

• Own architecture design and deployment oversight for Aviatrix deployments.
• Design multi-cloud networks including hub-and-spoke and inter-cloud connectivity.
• Implement cloud network security using Aviatrix DCF and microsegmentation.
• Lead quarterly reviews with stakeholders including executives.
• Act as technical escalation point for incidents.
• Identify risks and adoption opportunities and drive solutions.
• Relay feedback to Product and Engineering teams.

Skills

Enterprise networking

Cloud networking

Public clouds

BGP & MPLS

Zero Trust

Automation scripting

Python

Monitoring tools

Security compliance

Communication skills

Education

Bachelor's degree in Computer Science or related

Tools

Terraform

Ansible

Python

CloudWatch

Datadog

Job description

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai.

About the Role: Staff Cloud Network Architect

The Staff Cloud Network Architect is a strategic, customer-facing technical role responsible for ensuring the success of enterprise customers operating Aviatrix in production environments. As the primary technical point of contact, the Staff Cloud Network Architect partners closely with customers to understand their architecture, guide best practices, and drive long-term platform adoption and health. This is not a sales role and focuses on customer outcomes and operational excellence.

Key Responsibilities

• Serve as the dedicated technical point of contact for assigned enterprise customers, owning architecture design, deployment oversight, and operational excellence across their Aviatrix deployments.
• Design and validate multi-cloud network architectures (AWS, Azure, GCP, OCI) including transit networks, hub-and-spoke topologies, segmentation, and inter-cloud connectivity.
• Design and implement cloud network security architectures using Aviatrix Distributed Cloud Firewall, including microsegmentation policies, security domains, and Zero Trust network access controls.
• Lead quarterly business and technical reviews with customer stakeholders ranging from network engineers to C-level executives, identifying optimization opportunities and demonstrating platform value.
• Act as the technical escalation point for critical incidents, driving rapid resolution while coordinating with Aviatrix TAC and Engineering teams.
• Proactively identify risks, gaps, and adoption opportunities within customer environments, then drive implementation of solutions that unlock full platform value.
• Relay customer feedback, feature requests, and product gaps to Aviatrix Product and Engineering teams, serving as the internal voice of the customer.

Requirements/Qualifications

• 8+ years of hands‑on experience in enterprise networking, cloud networking, or network security roles within production environments.
• Demonstrated expertise with at least two major public clouds (AWS, Azure, GCP, or OCI), including VPC/VNet design, transit gateways, routing, and hybrid connectivity solutions.
• Strong foundation in BGP, SD‑WAN, MPLS, and hybrid cloud connectivity technologies such as AWS Direct Connect, Azure ExpressRoute, or Google Cloud Interconnect.
• Hands‑on experience designing and implementing network security architectures using NGFWs, IDS/IPS systems, microsegmentation, and Zero Trust network access principles.
• Proficiency with infrastructure automation and scripting using Python, Terraform, or Ansible for network provisioning and configuration management.
• Working knowledge of monitoring and observability tools such as CloudWatch, Azure Monitor, Splunk, or Datadog applied to network and security telemetry.
• Familiarity with cloud security compliance frameworks including SOC 2, FedRAMP, HIPAA, PCI-DSS, or NIST Cybersecurity Framework.
• Excellent communication and presentation skills, with the ability to translate technical concepts for audiences ranging from network engineers to executive stakeholders.

Nice to Have

• Hands‑on experience with Aviatrix Distributed Cloud Firewall (DCF), including smart groups, security domains, stateful inspection, and policy enforcement.
• Prior experience in a customer success, solutions engineering, or technical advisory role for enterprise infrastructure or security platforms.
• Certifications in cloud platforms (AWS Solutions Architect, Azure Administrator) or security (CISSP, CEH) that demonstrate advanced networking and security expertise.
• Experience integrating and managing third‑party network security solutions such as Palo Alto Networks, Fortinet, or Check Point within multi‑cloud environments.
• Demonstrated expertise in designing and implementing SD‑WAN or network segmentation solutions at scale within enterprise organizations.