Chief Network Architect

TPI Global Solutions; Downey (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

TPI Global Solutions is seeking a senior Cloud Network Engineer in Downey, CA to design, deploy, and manage robust cloud networking across AWS and Azure. You will implement multi-region architectures, ensure high availability, and optimize traffic flows between on-premises and multiple cloud environments.

Responsibilities focus on hybrid connectivity, security controls, and scalable network designs, including Transit Gateway, ExpressRoute, and VXCs.

Qualifications

• 6+ years designing and implementing cloud network infrastructures on AWS and Azure.
• 4+ years in highly available cloud network architectures with failover and DR patterns.
• 4+ years hands-on with AWS Transit Gateway, ExpressRoute, load balancing, and hybrid connectivity.
• 4+ years with Megaport for private cloud connectivity and VXC provisioning.

Skills

Cloud Networking

High Availability Architecture

Traffic Engineering

Security Engineering

VPC/VNet Peering

Border Gateway Protocol

Hybrid Connectivity

Network Security Groups

Education

AWS Certified Advanced Networking – Specialty / Solutions Architect Associate

Tools

Megaport

AWS Transit Gateway

Azure ExpressRoute

NVA / Virtual Firewall (Palo Alto VM-Series, Cisco CSR 8000v)

Job description

Duration: 12 months + Potential to extend / convert

Skills Required:

• Capability to design, configure, and operate network infrastructure across Amazon Web Services and Microsoft Azure environments.
• Expertise in delivering highly available and fault-tolerant cloud network architectures, including multi-region and multi–availability zone designs, failover mechanisms, and resiliency strategies.
• Hands-on implementation of hybrid connectivity using AWS Transit Gateway and Azure ExpressRoute.
• Operational knowledge of Megaport services, including provisioning Virtual Cross Connects (VXCs) and enabling private connectivity between cloud and on-premises environments.
• Strong capability in managing ingress and egress traffic flows, optimizing routing paths, and maintaining high availability and performance across distributed cloud networks.
• Proficiency in deploying and operating cloud-native load balancing solutions such as AWS Elastic Load Balancing, Azure Load Balancer, and Azure Application Gateway.
• Capability to deploy and manage virtual firewalls, including third-party network virtual appliances (e.g., Palo Alto VM-Series, Cisco CSR 8000v) alongside native cloud security controls.
• Solid working knowledge of network security constructs such as Network Security Groups (NSGs), AWS Security Groups, and network Access Control Lists.
• Capability to design and implement Virtual Private Cloud (VPC)/VNet peering, hybrid connectivity, and multi-region or multi-cloud architectures, including integration through Megaport services.
• Advanced capability in configuring and managing Border Gateway Protocol within cloud and hybrid network environments.
• Strong foundation in cloud network security practices, including secure architecture design, access control models, and alignment with compliance requirements.

Experience Required

• Cloud Network Engineering: At least six (6) years of experience designing, implementing, and managing cloud-based network infrastructures, with a strong focus on AWS (Amazon Web Services) and Azure.
• High Availability Architecture: At least four (4) years of experience designing and implementing highly redundant and highly available cloud network architectures, including failover mechanisms, disaster recovery strategies, and resilient connectivity patterns.
• Advanced Cloud Networking: At least four (4) years of hands-on experience with AWS (Amazon Web Services) and Azure networking services, including Transit Gateway, ExpressRoute, load balancing, and hybrid connectivity.
• Megaport Experience: At least four (4) years of experience working with Megaport Network services for private cloud connectivity, including Virtual Cross-connects (VXC) provisioning and hybrid/multi-cloud integration.
• Traffic & Security Engineering: At least four (4) years of experience in traffic engineering, network segmentation, firewall deployment (native and Network Virtual Appliance (NVA), and secure connectivity design.

Education Required:

This classification requires AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect, or Microsoft Certified: Azure Network Engineer Associate.