NetOps Architect

Combuilder Pte Ltd; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

Combuilder Pte Ltd is seeking an experienced Senior Network Architect to设计, build, and modernize enterprise and data center networks using DevOps principles. You will lead workshops, translate requirements into detailed HLD/LLD, and implement multi-vendor fabrics including Cisco Nexus and ACI, VXLAN/EVPN, and SR-MPLS/SRv6.

The role demands hands-on expertise with BGP/OSPF/IS-IS, MPLS, EVPN, and deep experience in data center fabrics, cloud connectivity, and network automation.

Qualifications

• 12–15 years hands-on experience in network engineering and architecture.
• Proven track record in designing, building, and modernizing network infrastructures with DevOps and automation.
• Deep hands-on experience with Cisco Nexus, Cisco ACI, VXLAN/EVPN, Spine-Leaf, and SD-WAN architectures.

Responsibilities

• Design, build, and modernize network infrastructures blending traditional networks with DevOps.
• Lead design workshops and translate requirements into HLD/LLD for data center, cloud, and service provider environments.
• Design and troubleshoot BGP/OSPF/IS-IS, MPLS, EVPN, VXLAN, and related underlays/overlays.
• Develop network automation using Python and Ansible; implement REST APIs and Linux scripting.
• Create detailed network configurations from approved designs and validate against standards.
• Build PoC/CPOC environments and perform pre-production validation, migrations, and testing.

Skills

Cisco Nexus

Cisco ACI

VXLAN/EVPN

BGP

OSPF

IS-IS

MPLS

SR-MPLS

SRv6

L3VPN

L2VPN

EVPN

QoS

IP SLA

Python

Ansible

REST APIs

Linux scripting

VMware

Kubernetes

Education

Master's or Bachelor's degree in Computer Engineering, Computer Science, Information Technology

Tools

Cisco Nexus

Cisco ACI

VXLAN/EVPN

VMware

Kubernetes

Ansible

REST APIs

Job description

Responsibilities:

• To designs, builds, and modernizes network infrastructures by blending traditional network architecture with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile, scalable, and highly responsive to application needs.
• Lead technical design workshops and translate network requirements into detailedHLD and LLD for enterprise, data center, cloud, and service provider environments.
• Design and implementCisco Nexus and Cisco ACIdata center fabrics usingVXLAN/EVPN, Spine-Leaf, Anycast Gateway, VTEP, VLAN/VNI mapping, VRF, and multi-site/multi-pod architectures.
• Design and implementBGP EVPN control planes, including route types, route targets, route distinguishers, EVPN route advertisement, underlay/overlay separation, and inter-VRF connectivity.
• Design and troubleshootCisco ACI fabric architecture, including tenants, VRFs, bridge domains, EPGs, contracts, L3Out, route control, fabric policies, and external connectivity.
• Design and implement enterprise and service provider routing architectures usingBGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, L3VPN, L2VPN, and segment routing.
• Design and troubleshootMPLS L3VPN/L2VPN, including PE-CE routing, MP-BGP, VRF, route-target policies, label distribution, VPNv4/VPNv6, pseudowire, and EVPN services.
• Design and implementSR-MPLS and SRv6architectures, including segment routing policies, traffic engineering, underlay routing, SID allocation, and path selection.
• Design and troubleshootBGP routing policies, including route filtering, communities, local preference, MED, AS-path manipulation, route reflectors, multipath, and traffic engineering.
• Design and troubleshootOSPF and IS-ISunderlay networks, including area/level design, adjacency, route summarization, redistribution, metric manipulation, and failure convergence.
• Design and troubleshoot Layer 2 architectures usingSTP/RSTP/MST, HSRP/VRRP, VLANs, port-channels, MLAG/vPC, and high-availability mechanisms.
• Design and implementQoS architectures, including classification, marking, queuing, policing, shaping, congestion management, and application-aware traffic treatment.
• Design and implementIP SLAand network monitoring mechanisms for path availability, latency, jitter, packet loss, and service verification.
• Design and implementCisco SD-WANarchitectures, including controllers, overlay tunnels, routing, policies, segmentation, application-aware routing, and centralized management.
• Design cloud connectivity and network architectures involvingVPC/VNet, VPN, dedicated connectivity, cloud routing, load balancing, transit networking, and network overlays.
• Integrate data center networks withAWS/Azure or equivalent cloud environments, including routing domains, VPN connectivity, dedicated circuits, segmentation, and hybrid-cloud connectivity.
• Design and troubleshootVMware network integration, including virtual switching, VLAN/VXLAN connectivity, distributed switching, and integration with physical data center fabrics.
• Design and troubleshootKubernetes networking and container network connectivity, including CNI, service networking, ingress/egress connectivity, and integration with underlying network infrastructure.
• Design and implement network security controls acrossrouters, switches, firewalls, data center fabrics, VRFs, ACLs, segmentation, and external connectivity.
• Develop detailednetwork configurationsfrom approved HLD/LLD and validate configuration consistency against design standards.
• Build networkPoC/CPOC environments, including physical and virtual topology construction, configuration, traffic validation, failure testing, interoperability testing, and performance testing.
• Perform network staging, pre-production validation, commissioning, migration, upgrade, rollback, and post-implementation verification.
• Lead complexnetwork migration and upgrade activities, including topology migration, routing migration, data center fabric migration, service migration, traffic cutover, rollback planning, and failure recovery.
• Perform packet-level and protocol-level troubleshooting usingpacket captures, routing tables, ARP/MAC tables, BGP/OSPF/IS-IS databases, MPLS labels, EVPN routes, logs, counters, and telemetry.
• Troubleshoot complex failures involvingBGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, VXLAN, EVPN, ACI, STP, HSRP/VRRP, QoS, and overlay/underlay connectivity.
• Analyze network performance using interface statistics, packet loss, latency, jitter, utilization, queue drops, CPU/memory utilization, routing convergence, and traffic-flow data.
• Develop network automation usingPython, Ansible, REST APIs, Linux scripting, and infrastructure automation frameworks.
• Develop and maintain technical network documentation coveringHLD, LLD, topology diagrams, IP addressing, VLAN/VNI mapping, VRF architecture, routing policy, configuration standards, test plans, migration plans, and rollback procedures.
• Design and support high-performance networking environments usingRDMA, RoCEv2, InfiniBand, and Ultra Ethernet, where applicable.
• Troubleshoot and optimizeRoCEv2/RDMAnetworks, including lossless Ethernet, PFC, ECN, congestion management, QoS, and latency-sensitive traffic requirements

Requirements

• Masters’ or Bachelors’ degree in Computer Engineering, Computer Science, Information Technology or relevant studies.
• 12–15 yearsof hands-on experience in network engineering and architecture, including large-scale data center, enterprise, telecommunications, or service provider environments.
• Demonstrated track records in designs, builds, and modernizes network infrastructures with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile and scalable.
• Deep hands-on experience withCisco Nexus, Cisco ACI, VXLAN/EVPN, Spine-Leaf, Cisco Catalyst, and Cisco SD-WAN.
• Expert-level knowledge ofBGP, OSPF, IS-IS, STP/RSTP/MST, HSRP/VRRP, MPLS, SR-MPLS, SRv6, L3VPN, L2VPN, and EVPN.
• Strong hands-on experience withCisco ACI fabric architecture, including tenants, VRFs, bridge domains, EPGs, contracts, L3Out, fabric policies, and external routing.
• Strong hands-on experience withVXLAN/EVPN, including underlay/overlay architecture, VTEP, VNI, EVPN route types, Anycast Gateway, VRF, route targets, and multi-fabric connectivity.
• Strong experience withMPLS, MP-BGP, VPNv4/VPNv6, L3VPN, L2VPN, pseudowire, SR-MPLS, and SRv6.
• Strong understanding ofLayer 2 high availability, including STP, HSRP/VRRP, vPC/MLAG, VLANs, port-channels, and failure convergence.
• Strong knowledge ofQoS, IP SLA, network telemetry, performance monitoring, and traffic engineering.
• Hands-on experience withCisco SD-WANand overlay-based WAN architectures.
• Experience withcloud networking, including VPC/VNet, VPN, dedicated connectivity, cloud routing, transit networking, load balancing, and hybrid-cloud connectivity.
• Experience integrating network infrastructure withVMware and Kubernetesenvironments.
• Strong hands-on troubleshooting skills usingpacket captures, protocol analysis, routing databases, forwarding tables, logs, counters, telemetry, and network diagnostic tools.
• Strong experience withnetwork migration, upgrade, staging, commissioning, cutover, rollback, and post-migration validation.
• Strong experience buildingPoC/CPOC environmentsand executing complex network validation and interoperability testing.
• Strong programming/scripting skills inPythonand Linux, with practical experience usingAnsible and REST APIsfor network automation.
• Experience withRDMA, RoCEv2, InfiniBand, and/or Ultra Ethernetis advantageous.
• CCIE or equivalent professional-level certification is required.
• Dual CCIEis advantageous.
• HCIE or equivalent professional-level certificationis advantageous
• Mandarin/Chinese and English proficiencyis required to communicate technically with Chinese-speaking customers, counterparts, vendors, and engineering teams.