Cloud Network Architect

Aviatrix; Atlanta (NY); On-site; USD 138,235 - 162,629; Full time

Job summary

Aviatrix is hiring a Cloud Network Architect to be a strategic, customer-facing technical lead for enterprise customers. You will design multi-cloud network architectures, guide transit topologies, and ensure secure, scalable deployments across AWS, Azure, GCP, and more.

In this role, you will own end-to-end technical relationships, drive best practices, and mentor teams while aligning with security standards such as Zero Trust and microsegmentation.

Qualifications

• 8+ years of experience in enterprise networking or cloud networking.
• Hands-on expertise with at least two major public clouds (AWS, Azure, GCP, OCI).
• Experience with BGP, SD-WAN, MPLS and hybrid connectivity.
• Proficiency with Aviatrix Distributed Cloud Firewall (DCF).
• Familiarity with SOC 2, FedRAMP, HIPAA, PCI-DSS, and NIST CSF.
• Automation/scripting (Python, Terraform, Ansible) for provisioning.
• Experience with monitoring/observability tools (CloudWatch, Azure Monitor, Splunk, Datadog).

Responsibilities

• Serve as Trusted Advisor for top enterprise customers, aligning architecture with business goals.
• Own end-to-end technical relationships, deployment oversight, and operational reviews.
• Lead regular reviews with stakeholders from engineers to executives.
• Identify risks and optimization opportunities in Aviatrix deployments.
• Drive adoption of Aviatrix platform capabilities to realize full value.

Skills

Multi-cloud design

BGP/SD-WAN/MPLS

Automation scripting

Cloud monitoring

Aviatrix DCF

Zero Trust/microsegmentation

Tools

Terraform

Ansible

Python

Job description

WHO WE ARE

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises.

About the role

The Cloud Network Architect is a strategic, customer-facing technical role responsible for ensuring the success of enterprise customers operating Aviatrix in production environments. As the primary technical point of contact, the Cloud Network Architect Trusted Advisor partners closely with customers to understand their architecture, guide best practices, and drive long-term platform adoption and health. This is not a sales role and focuses on customer outcomes and operational excellence.

Position Responsibilities

Customer Engagement & Technical Ownership

• Serve as the dedicated Trusted Advisor for assigned strategic enterprise customers, acting as an extension of their cloud networking team.
• Own the end‑to‑end technical relationship including architecture design, deployment oversight, change management, and operational reviews.
• Lead regular business and technical reviews (QBRs/TBRs) with customer stakeholders, from network engineers to C‑level executives.
• Proactively identify risks, gaps, and optimization opportunities within the customer's Aviatrix deployment.
• Drive customer adoption of Aviatrix platform capabilities, ensuring customers realize full value from their investment.

Cloud Network Architecture & Design

• Design and validate multi‑cloud network architectures (AWS, Azure, GCP, OCI) leveraging the Aviatrix platform.
• Guide customers through transit network design, hub‑and‑spoke topologies, segmentation, and inter‑cloud connectivity.
• Collaborate with customer teams on BGP, SD‑WAN, MPLS, and hybrid connectivity designs.
• Document reference architectures and operational runbooks tailored to each customer's environment.
• Advise on cloud cost optimization strategies related to network topology and traffic flows.

Network Security & Aviatrix DCF

• Design and implement cloud network security architectures using Aviatrix Distributed Cloud Firewall (DCF).
• Define and enforce microsegmentation policies, security domains, and network‑level access controls across multi‑cloud environments.
• Architect and deploy DCF smart groups, security policies, and distributed stateful inspection to protect east‑west and north‑south traffic.
• Integrate Aviatrix DCF with third‑party NGFW and security solutions (Palo Alto, Fortinet, Check Point) for unified security posture.
• Guide customers on Zero Trust Network Access (ZTNA) principles and implementation using Aviatrix security capabilities.
• Drive adoption of Aviatrix ThreatIQ, network threat detection, and security analytics within customer environments.
• Support security compliance initiatives (SOC 2, FedRAMP, HIPAA, PCI‑DSS) through proper network security policy design.
• Collaborate with customer security operations teams to align Aviatrix DCF policies with organizational security standards and compliance requirements.

Operations & Incident Management

• Act as the technical escalation point for critical incidents within the customer's Aviatrix environment.
• Drive rapid resolution of network and security incidents, coordinating with Aviatrix TAC and Engineering as needed.
• Monitor platform health, perform proactive issue identification, and implement preventative measures.
• Develop and execute change management plans for major upgrades, migrations, and new feature deployments.

Collaboration & Thought Leadership

• Serve as the voice of the customer internally — relay feedback, feature requests, and product gaps to Product and Engineering teams.
• Contribute to internal knowledge base, runbooks, and best‑practice documentation for the Embedded Engineering team.
• Mentor junior team members and share expertise on cloud networking and security architecture.
• Engage with Aviatrix field and product teams to stay current on roadmap, and proactively position new capabilities to customers.

Requirements

• 8+ years of experience in enterprise networking, cloud networking, or network security roles.
• Hands‑on expertise with at least two major public clouds (AWS, Azure, GCP, or OCI) — including VPC/VNet design, transit gateways, and routing.
• Strong understanding of BGP, SD‑WAN, MPLS, and hybrid cloud connectivity (Direct Connect, ExpressRoute, Cloud Interconnect).
• Experience with network security technologies: NGFWs, IDS/IPS, microsegmentation, Zero Trust, and cloud‑native security controls.
• Hands‑on experience with Aviatrix Distributed Cloud Firewall (DCF) — smart groups, security domains, stateful inspection, and policy enforcement — strongly preferred.
• Familiarity with cloud security compliance frameworks: SOC 2, FedRAMP, HIPAA, PCI‑DSS, NIST CSF.
• Proficiency with automation and scripting (Python, Terraform, Ansible) for network provisioning and operations.
• Experience with monitoring and observability tools (CloudWatch, Azure Monitor, Splunk, Datadog) applied to network and security telemetry.

US annual base salary range for this full‑time position is $138,235 – $162,629 + benefits + 401(k) match + equity and is bonus‑eligible. The pay range is determined by the role, work location, job‑related skills, level, experience and relevant education. The range displayed is applicable only for new hires for the listed position located in the US. Your Talent Advisor can share more details regarding salary ranges, benefits, and equity for your location during the hiring process.

Benefits

US: We cover 100% of employee premiums and 88% of dependent(s) premiums for medical, dental and vision coverage, 401(k) match, short and long‑term disability, life/AD&D insurance, $1,000/year education reimbursement, and a flexible vacation policy.

Outside the US: We offer a comprehensive benefits package which, (subject to regional variations) could include pension, private medical for you and dependents, generous holiday allowance, life assurance, long‑term disability, annual wellbeing stipend.

Aviatrix, Inc. is an equal opportunity employer and does not make hiring decisions based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

CPRA - California Applicant Privacy Notice