Director of Network

Subway; Shelton (CT); On-site; USD 184,500 - 230,600; Full time

Benefits offered by this job

Pension/401K/RSP

Competitive Bonus

Tuition Reimbursement

Company Holidays

Volunteering time

Job summary

Subway is seeking a Director of Network to own the strategy, architecture, and operations of the enterprise network across corporate, cloud, and franchise environments. You will drive WAN/LAN, SD-WAN, ZTNA, DNS, and load balancing with IaC across Azure and AWS.

You will lead a blended team, manage multi‑million-dollar budgets, and ensure SOX/PCI-DSS compliance while advancing automation and cost optimization for 37,000+ locations globally.

Qualifications

• Bachelor's degree in Computer Science, Networking, or related field.
• 12–15+ years in IT infrastructure with 5+ years in senior leadership over enterprise networks.
• Expertise in ZTNA, VPN-to-ZTNA migration, Palo Alto NGFW, SD-WAN, and multi-cloud networking.

Responsibilities

• Define and drive enterprise network strategy across WAN/LAN, SD-WAN, and cloud networking.
• Lead IaC adoption (Terraform) and CI/CD pipelines for network config deployment.
• Oversee 37,000+ restaurant locations connectivity and vendor management.

Skills

ZTNA

Routing & Switching

SD-WAN

Cloud Networking

Executive Communication

Education

Bachelor's degree in CS/Networking

CCNP or CCIE

AZ-700 or AWS Advanced Networking

Tools

Terraform

Ansible

Job description

At Subway, we are not standing still. We are building.

This is a business focused on what matters most: growing franchisee profitability, strengthening our brand and creating long-term value. The people who thrive here are the ones who want to make a real impact.

You will not just do the work. You will shape it.

We move fast. We think like owners. We make decisions that matter. We hold ourselves to a high standard because what we do directly impacts thousands of franchisees around the world.

If you bring energy, accountability and a bias for action, you will fit right in.

We take the work seriously, but we also know the best results come from teams that support each other, celebrate wins and show up ready to build something better every day.

This is your chance to be part of what’s next.

Role Overview

The Director of Network is a senior technology leader responsible for the strategy, architecture, and operational excellence of Subway's enterprise network infrastructure. Reporting to the Sr. Director of Platform Engineering, this role owns WAN/LAN, SD-WAN, ZTNA, DNS, and load balancing across corporate, cloud (Azure/AWS), and franchise restaurant environments.

Key Responsibilities

Network Strategy & Architecture

• Define enterprise network strategy: WAN/LAN, SD-WAN (Silver Peak/Aruba EdgeConnect), restaurant connectivity, NGFW (Palo Alto), and cloud networking (Azure vNET/ExpressRoute/Firewall/NSGs; AWS Transit Gateway/VPC/Direct Connect).
• Own the ZTNA roadmap, replacing legacy VPN with zero trust access.
• Design DNS, DHCP, IPAM, and load balancing for high availability across corporate and franchise environments.
• Partner with Cyber Security on segmentation and firewall policy compliance.
• Drive cloud-native architecture (hub-and-spoke, shared services, IaC provisioning) across Azure and AWS.

Infrastructure-as-Code & Automation

• Lead Terraform adoption as the primary IaC tool; enforce module governance and state management.
• Build CI/CD pipelines (GitHub Actions/Azure DevOps) for automated network config deployment.
• Supplement Terraform with light scripting (Python/Ansible) only where needed.
• Champion automation-first culture; implement drift detection and remediation.
• Own multi-cloud architecture and operations across Azure and AWS with consistent security posture and routing design.
• Manage VNets, peering, private endpoints, NSGs, route tables, and cloud-native firewalls.
• Lead observability (flow logs, performance monitoring, alerting) and cost optimization (right-sizing, traffic engineering, egress governance).
• Partner with Cloud Engineering and Application teams on scalable architectures.
• Oversee connectivity/performance for 37,000+ restaurant locations globally.
• Standardize restaurant network architecture (POS, guest Wi-Fi, digital menu boards, IoT).
• Manage ISP/MSP/equipment vendor relationships for SLA adherence and cost control.
• Lead a blended team (FTE + managed services) across network engineering and operations.
• Hold vendors/system integrators accountable to SOWs, SLAs, and milestones.
• Manage annual operating/capital budgets; champion AI tooling adoption.
• Ensure network controls meet SOX, PCI-DSS, GDPR, CCPA; serve as audit point of contact.
• Maintain and test DR/BC plans.
• Identify and mitigate availability and security risks.

Required Qualifications

• Bachelor's in Computer Science, Network Engineering, Cybersecurity, IT, or related field.
• 12–15+ years in IT infrastructure/network engineering, including 5+ years in senior leadership over enterprise network functions. Multi‑site franchise/retail/QSR experience preferred.
• Deep expertise in ZTNA, routing/switching (BGP, OSPF, VXLAN), Palo Alto NGFW (PAN-OS, Panorama), and Silver Peak/Aruba EdgeConnect SD-WAN (overlay design, path conditioning, QoS).
• Strong cloud networking across Azure (vNET, ExpressRoute, Firewall, NSGs, App Gateway) and AWS (Transit Gateway, VPC, Direct Connect, Security Groups, Network Firewall), including hub-and-spoke and shared services at scale.
• Terraform required as primary automation mechanism — modular codebases, remote state, drift detection, CI/CD integration. Light scripting (Python/Ansible) a plus.
• Certifications: CCNP or CCIE required; AZ-700 or AWS Advanced Networking Specialty preferred; Terraform Associate and ITIL v4 a plus.
• Proven leadership of blended FTE/MSP teams, multi-million-dollar budget management, and vendor accountability.
• Strong executive communication skills, able to translate technical topics for business audiences.

Hands‑On Technical Requirements

• AWS VPC: subnetting, routing, peering, PrivateLink, security groups, NACLs across multi‑account environments
• AWS Transit Gateway: multi‑VPC/account connectivity, route segmentation, inter‑region peering, centralized inspection
• NSGs: rule design and automated enforcement at scale
• ZTNA: hands‑on implementation and operations
• Palo Alto Networks: NGFW administration, policy management, threat prevention
• Terraform: production‑grade modules for Azure/AWS, remote state, workspaces, pipelines
• Cloud observability: flow logs, network watcher, traffic analytics, alerting

Preferred

• QSR/franchise/hospitality experience at 10,000+ location scale
• Legacy VPN‑to‑ZTNA migration experience
• Zero Trust framework familiarity (CISA, Forrester, NIST 800‑207)
• AIOps/generative AI familiarity for network automation and troubleshooting

Why This Role

Own network strategy for one of the world's largest franchise brands — 37,000+ restaurants and a global workforce — while leading Subway's transition to Zero Trust and a scaled, IaC‑driven multi‑cloud network.

What do we offer?

• Pension/401K/RSP (country specific)
• Competitive Bonus
• Tuition Reimbursement
• Company Holidays
• Volunteering time

Compensation: The base pay range for this role is $184,500-230.600 annually

Pay within this range will be determined in good faith based on job‑related factors, which may include skills, experience, education/training, location, and internal equity.