Network Architect

Envision Technology Solutions; Berkeley Heights (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Envision Technology Solutions is seeking a Network Architect to lead design and delivery for a new data center. You will own the network target state, standards, configurations, testing, and migration governance, partnering with security, compute, storage, and facilities teams.

The role focuses on叶fl communal architecture with strong emphasis on BGP/EVPN-VXLAN, leaf-spine, segmentation, DCI, and observability, ensuring production-grade networks and predictable operations.

Qualifications

• 8–12+ years in enterprise network architecture with delivery leadership in new DC builds or major network transformations.
• Deep expertise in DC networking concepts: BGP, EVPN/VXLAN, leaf-spine, routing policy, redundancy, and high availability design.
• Strong experience with segmentation: VRFs/VLANs, security zoning, and firewall integration.
• Proven ability to produce HLD/LLD, standards, MOPs, and operational runbooks.
• Strong stakeholder leadership across security, compute, storage, and facilities with clear conventions, port maps, and “as-built” documentation.

Responsibilities

• Data Center Fabric: Architect and guide implementation of leaf-spine with EVPN/VXLAN and/or Cisco ACI (or equivalent); define underlay/overlay, BGP, MTU/jumbo frames, and control-plane protections.
• Segmentation & Security Zones: Design VRF/VLAN strategy, micro-segmentation alignment (where applicable), east-west controls, firewall placement, and north-south security boundaries in coordination with InfoSec.
• DC Interconnect (DCI) & WAN Edge: Design DCI between DC1/DC2, connectivity to WAN/Internet/cloud, redundancy, QoS, and routing policy (BGP/OSPF as required).
• Core Network Services: Own integration patterns for DNS/DHCP/IPAM (Infoblox or equivalent), NTP, PKI/cert dependencies, TACACS/RADIUS, and network management.
• Load Balancing & Traffic Services: Partner on L4–L7 design (e.g., F5 or equivalent), VIP standards, failover, and integration with security zones.
• Observability & Operations: Define monitoring/telemetry (SNMP/streaming telemetry), syslog/SIEM integration, NetFlow/IPFIX, alerting standards, and operational runbooks.
• Implementation Governance: Validate BOMs and vendor designs, lead build MOPs, configuration standards, peer reviews, and testing/acceptance criteria.
• Migration & Cutover Support: Create cutover plans for network moves (routing changes, VLAN extensions, DCI cutovers), rollback procedures, and validation checklists; support window change.

Skills

DC networking architecture

BGP

EVPN/VXLAN

Leaf-spine design

VRF/VLAN segmentation

Firewall integration

HLD/LLD

MOPs/runbooks

Stakeholder leadership

Tools

Infoblox

TACACS/RADIUS

SNMP

NetFlow/IPFIX

SIEM integration

Job description

Role Summary

We are seeking a Network Architect to lead network design and technical delivery for a new data center

(primary/secondary). This role partners with security, computer, storage, backup/DR, and facilities teams

to implement a production-grade network that supports critical workloads, tight security controls, and

predictable operations. The architect owns the network target state, standards, configurations, testing,

and migration/cutover governance.

Key Responsibilities

design, routing strategy, segmentation model, and operational standards aligned to resiliency

and security requirements.

• Data Center Fabric: Architect and guide implementation of leaf-spine with EVPN/VXLAN and/or Cisco ACI (or equivalent); define underlay/overlay, BGP, MTU/jumbo frames, and control-plane protections.


• Segmentation & Security Zones: Design VRF/VLAN strategy, micro-segmentation alignment (where applicable), east-west controls, firewall placement, and north-south security boundaries in coordination with InfoSec.


• DC Interconnect (DCI) & WAN Edge: Design DCI between DC1/DC2, connectivity to WAN/Internet/cloud, redundancy, QoS, and routing policy (BGP/OSPF as required).


• Core Network Services: Own integration patterns for DNS/DHCP/IPAM (Infoblox or equivalent), NTP, PKI/cert dependencies, TACACS/RADIUS, and network management.


• Load Balancing & Traffic Services: Partner on L4–L7 design (e.g., F5 or equivalent), VIP standards, failover, and integration with security zones.


• Observability & Operations: Define monitoring/telemetry (SNMP/streaming telemetry), syslog/SIEM integration, NetFlow/IPFIX, alerting standards, and operational runbooks.


• Implementation Governance: Validate BOMs and vendor designs, lead build MOPs, configuration standards, peer reviews, and testing/acceptance criteria.


• Migration & Cutover Support: Create cutover plans for network moves (routing changes, VLAN extensions, DCI cutovers), rollback procedures, and validation checklists; support window change.

conventions, port maps, and “as-built” documentation.

Required Qualifications

• 8–12+ years in enterprise network architecture with delivery leadership in new DC builds or major network transformations.


• Deep expertise in DC networking concepts: BGP, EVPN/VXLAN, leaf-spine, routing policy, redundancy, and high availability design.


• Strong experience with segmentation: VRFs/VLANs, security zoning, and firewall integration.


• Proven ability to produce HLD/LLD, standards, MOPs, and operational runbooks.


• Strong stakeholder leadership across security, compute, storage, and facilities with clear