Infrastructure Architect - Network & SASE

Cognizant; Dearborn (MI); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Cognizant in Dearborn, MI is seeking an Infrastructure Architect - Network & SASE to lead the architecture and modernization of a large-scale enterprise WAN across the EMEA region, with hybrid work options. You will design Cisco SD-WAN and SASE solutions, guide governance, and partner with security, cloud, and service providers to ensure secure, resilient connectivity.

You will own SD-WAN platform administration, craft high- and low-level designs, drive migrations, and provide technical

Qualifications

• 10+ years of network architecture and design experience in large-scale WANs.
• Hands-on Cisco Catalyst SD-WAN (Viptela) experience.
• 5+ years operating at CCNP Enterprise level with Cisco cert.
• 3+ years implementing SASE/SSE solutions (Prisma Access, Zscaler, etc).
• Strong WAN architecture, routing, security, and enterprise connectivity.
• Deep knowledge of BGP, OSPF, route maps, ACLs, VPNs, IPsec, QoS, segmentation.
• Experience leading network transformation, lifecycle management, governance.
• Strong stakeholder/vendor management and communication.
• Experience leading network engineering/architecture teams.

Responsibilities

• Lead architecture and design of enterprise WAN solutions across the EMEA region.
• Design, deploy, and optimize Cisco Catalyst SD-WAN environments (vManage/vSmart/vBond/vEdge/cEdge).
• Own and administer the Cisco vManage platform, templates, policies, and governance.
• Design centralized SD-WAN policies with application-aware routing, QoS, security.
• Manage provisioning and configuration of SD-WAN edge devices using templates and automation.
• Lead WAN circuit migrations, upgrades, and connectivity transformations.
• Design and implement SASE/SSE solutions using Prisma Access or Zscaler.
• Develop HLDs/LLDs, implementation plans, and change-management docs.
• Define network standards covering routing, security, segmentation, resiliency.
• Ensure lifecycle compliance through upgrades and governance.
• Collaborate with security, cloud, infra, and app teams; coordinate with providers.
• Monitor performance, identify optimization opportunities and risks.
• Troubleshoot complex network issues and provide technical leadership.

Skills

Cisco SD-WAN

BGP

OSPF

VPNs

IPsec

QoS

Network security

Network automation

Infrastructure-as-Code

Zero Trust

Vendor management

Stakeholder communication

Education

CCNP Enterprise certification

CCIE Enterprise Infrastructure (preferred)

Tools

Cisco vManage

Cisco vSmart

Cisco vBond

Cisco Edge (vEdge/cEdge)

Palo Alto Prisma Access

Zscaler

Job description

About the role
As an Infrastructure Architect - Network & SASE, you will make an impact by leading the architecture, modernization, and transformation of a large-scale enterprise WAN environment across the EMEA region. You will be responsible for designing and implementing strategic network solutions, driving Cisco SD-WAN and Secure Access Service Edge (SASE) initiatives, and ensuring secure, resilient, and scalable connectivity that supports critical business operations. You will be a valued member of the Cloud Infrastructure and Security team working collaboratively with security, cloud, infrastructure, and service provider teams.

In this role, you will

• Lead the architecture and design of enterprise WAN solutions across the EMEA region.
• Design, deploy, and optimize Cisco Catalyst SD-WAN (formerly Viptela) environments, including vManage, vSmart, vBond, and vEdge/cEdge technologies.
• Own and administer the Cisco vManage platform, including template management, policy deployment, software lifecycle management, monitoring, and operational governance.
• Design and implement centralized SD-WAN policies through vManage, including application-aware routing, segmentation, QoS, security policies, and traffic engineering.
• Manage provisioning, onboarding, and configuration of SD-WAN edge devices using vManage templates and automation capabilities.
• Lead WAN circuit migrations, upgrades, technology refreshes, and connectivity transformation initiatives.
• Design and implement SASE/SSE solutions leveraging Palo Alto Prisma Access, Zscaler, or equivalent platforms.
• Develop High-Level and Low-Level Design documentation (HLDs/LLDs), implementation plans, and change management documentation.
• Define network architecture standards covering routing, security, segmentation, resiliency, and performance optimization.
• Ensure network platforms remain compliant with lifecycle standards through software upgrades, configuration governance, and operational best practices.
• Collaborate with security, cloud, infrastructure, and application teams to ensure network services align with business and security requirements.
• Coordinate with service providers for circuit provisioning, renewals, upgrades, escalations, and SLA management.
• Monitor network performance, availability, and utilization, proactively identifying optimization opportunities and operational risks.
• Troubleshoot complex network issues across SD-WAN, routing, security, and connectivity domains, including vManage, vSmart, vBond, and edge devices.
• Provide technical leadership, mentorship, and architectural guidance to engineering and delivery teams.

Work model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a client or Cognizant office in Dearborn, MI. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

What you need to have to be considered

• 10+ years of Network Architecture and Design experience, including large-scale enterprise WAN environments.
• Excellent hands‑on experience with Cisco Catalyst SD‑WAN (Viptela).
• Deep expertise with Cisco SD‑WAN technologies including vManage, vSmart, vBond, and vEdge/cEdge.
• 5+ years of experience operating at a CCNP Enterprise level with a valid Cisco certification.
• 3+ years of experience implementing and supporting SASE/SSE solutions such as Palo Alto Prisma Access, Zscaler, or equivalent platforms.
• Strong expertise in WAN architecture, routing, switching, network security, and enterprise connectivity.
• Advanced knowledge of BGP, OSPF, route maps, policy controls, ACLs, VPNs, IPsec, QoS, and network segmentation.
• Experience leading network transformation initiatives, software lifecycle management, and governance activities.
• Strong stakeholder management, vendor management, and communication skills.
• Experience leading network engineering, architecture, or transformation teams.

These will help you stand out

• Experience supporting global enterprise networks across multiple geographic regions.
• Experience with Azure and AWS networking, hybrid connectivity, and cloud integration.
• Proficiency with network automation, orchestration, and Infrastructure-as-Code methodologies.
• Experience developing network standards, governance frameworks, and architecture roadmaps.
• Strong understanding of Zero Trust and modern SASE security architectures.
• Industry‑recognized networking and security certifications such as Cisco CCIE Enterprise Infrastructure, Palo Alto Prisma Access, Zscaler, SASE/SSE, or cloud networking certifications.

We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.

Please note, this role is not able to offer visa transfer or sponsorship now or in the future.