Cloud Network Architect

Cognizant; Plain City (OH); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Job summary

Cognizant Technology Solutions Corporation is seeking a Cloud Network Architect to design secure, scalable network solutions across Azure, AWS, on-prem and enterprise locations. You will establish standards, lead migrations, and collaborate with security, platform, and operations teams to deliver reliable hybrid connectivity.

You will design architectures, implement hub-and-spoke and transit patterns, and define routing, IP management, DNS, NAT, firewall, and segmentation standards.

Qualifications

• Bachelor's degree or equivalent experience in computing fields.
• 8+ years of enterprise network engineering experience.
• 4+ years designing Azure and AWS network solutions.
• Strong knowledge of routing, VPN, NAT, security, and segmentation.
• Hands-on with Azure VNet, ExpressRoute and AWS VPC, Direct Connect.

Responsibilities

• Design target-state network architectures for multi-cloud environments.
• Architect hub-and-spoke, transit, and shared-services patterns.
• Define secure hybrid connectivity and addressing standards.
• Lead migration planning, cutover design, and DR patterns.
• Automate provisioning with IaC and align with CI/CD.

Skills

Azure/AWS network design

TCP/IP, BGP, OSPF, DNS

Architecture leadership

Migration planning

CI/CD collaboration

Education

Bachelor's degree in CS/Engineering/IT

Azure Network Engineer Associate

Azure Solutions Architect Expert

AWS Certified Advanced Networking - Specialty

AWS Certified Solutions Architect - Professional

CCNP/CCIE or equivalent networking certs

Tools

Terraform

Bicep/ARM templates

AWS CloudFormation

Azure Monitor

CloudWatch

Job description

The Cloud Network Architect designs secure, resilient, scalable, and cost-effective network solutions across Azure, AWS, on-premises data centers, and enterprise locations. The role establishes architecture standards, leads to complex migrations, and partners with security, platform, application, and operations teams to deliver reliable hybrid and multi-cloud connectivity.

About Cognizant’s CIS Practice:

Cognizant’s CIS (Cognizant Infrastructure Services) Practice is a global leader in providing IT infrastructure services. We deliver innovative solutions to optimize and transform IT infrastructure, ensuring business agility and operational efficiency. Our services include cloud computing, data center management, network services, and cybersecurity. We focus on understanding client needs and delivering customized solutions to drive business success.

In this role, you will:

• Design target-state network architectures for Azure and AWS, including multi-account and multi-subscription environments.
• Architect hub-and-spoke, transit, shared-services, and segmented landing-zone network patterns.
• Design hybrid connectivity using Azure ExpressRoute, AWS Direct Connect, site-to-site VPN, SD-WAN, and redundant carrier paths.
• Define routing, IP address management, DNS, load balancing, ingress/egress, NAT, firewall, proxy, and network segmentation standards.
• Implement secure connectivity using Azure Firewall, Network Security Groups, Web Application Firewall, AWS Network Firewall, Security Groups, Network ACLs, and centralized inspection patterns.
• Lead network discovery, dependency mapping, migration planning, cutover design, performance validation, and operational handover.
• Create architecture diagrams, high-level and low-level designs, implementation standards, decision records, and disaster-recovery patterns.
• Automate provisioning and policy enforcement using Terraform or Bicep/ARM and AWS CloudFormation; integrate changes with CI/CD and version control.
• Establish monitoring and troubleshooting practices using Azure Monitor, Network Watcher, AWS CloudWatch, VPC Flow Logs, and centralized logging platforms.
• Provide technical leadership for incident resolution, root-cause analysis, capacity planning, cost optimization, and architecture governance.

What you’ll need to succeed:

• Bachelor's degree in computer science, Engineering, Information Technology, or equivalent practical experience.
• 8+ years of enterprise network engineering experience, including 4+ years designing Azure and AWS network solutions.
• Strong knowledge of TCP/IP, BGP, OSPF, DNS, DHCP, NAT, VPN, TLS, load balancing, firewalls, proxies, and network segmentation.
• Hands-on architecture experience with Azure Virtual Network, peering, Virtual WAN, ExpressRoute, Private Link, Private DNS, Application Gateway, and Azure Load Balancer.
• Hands-on architecture experience with Amazon VPC, Transit Gateway, Direct Connect, PrivateLink, Route 53, Elastic Load Balancing, and AWS Global Accelerator.
• Experience with infrastructure as code, Git-based delivery, CI/CD pipelines, cloud governance, and enterprise security controls.
• Ability to communicate architecture decisions, risks, trade-offs, and implementation guidance to technical and business stakeholders.
• Microsoft Certified: Azure Network Engineer Associate or Azure Solutions Architect Expert.
• AWS Certified Advanced Networking - Specialty or AWS Certified Solutions Architect - Professional.
• Cisco CCNP/CCIE, Fortinet, Palo Alto Networks, Aviatrix, VMware NSX, or equivalent networking certifications and experience.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.