Network Architect

Tata Consultancy Services; Irvine (CA); On-site; USD 100,000 - 140,000; Full time

Job summary

Tata Consultancy Services is seeking a Network Architect to design enterprise-grade AWS network architectures, including multi-account structures and hybrid connectivity across global sites. The role requires expertise in VPCs, Transit Gateway, Direct Connect, and security frameworks with zero-trust principles.

Responsibilities include leading governance for IPAM/DNS/load balancing, automation with Terraform/CloudFormation, and monitoring with CloudWatch and VPC Flow Logs.

Qualifications

• 8+ years in enterprise networking, with at least 5 years specifically focused on AWS Cloud Architecture.

Responsibilities

• Architectural Strategy: Design and document enterprise-grade AWS network architectures, including Multi-Account structures using AWS Control Tower and Organizations.
• Hybrid Connectivity: Implement complex hybrid patterns using AWS Direct Connect, Transit Gateway, and Site-to-Site VPN to link global sites with AWS VPCs.
• Security & Compliance: Lead the design of Zero-Trust network frameworks, implementing AWS Network Firewall, WAF, and micro-segmentation through Security Groups and NACLs.
• Automation (IaC): Standardize infrastructure deployment using Terraform or CloudFormation to eliminate manual configuration and ensure reproducibility.
• Network Governance: Establish and enforce standards for IP address management (IPAM), DNS (Route 53), and load balancing (ALB/NLB/GWLB).
• Performance & Observability: Design monitoring solutions using Amazon CloudWatch, VPC Flow Logs, and Traffic Mirroring to proactively identify and resolve bottlenecks.
• Cost Optimization: Analyze data transfer patterns and architect solutions to minimize AWS egress costs and resource waste.

Skills

AWS Networking

Routing Protocols

Security Tools

Automation

Legacy Integration

Tools

Terraform

CloudFormation

Job description

• AWS Networking: Expert proficiency in VPC, Transit Gateway, PrivateLink, CloudFront, and Global Accelerator.
• Routing Protocols: Deep knowledge of BGP, OSPF, and SD-WAN integration.
• Security Tools: Hands-on experience with IAM, KMS, and third-party virtual firewalls (e.g., Palo Alto, Fortinet).
• Automation: Advanced scripting skills in Python (Boto3) or Bash.
• Legacy Integration: Ability to migrate multi-tier legacy applications from on-premises to AWS-native frameworks.

Job Description

Network Architect

Must Have Technical/Functional Skills

• AWS Networking: Expert proficiency in VPC, Transit Gateway, PrivateLink, CloudFront, and Global Accelerator.
• Routing Protocols: Deep knowledge of BGP, OSPF, and SD-WAN integration.
• Security Tools: Hands-on experience with IAM, KMS, and third-party virtual firewalls (e.g., Palo Alto, Fortinet).
• Automation: Advanced scripting skills in Python (Boto3) or Bash.
• Legacy Integration: Ability to migrate multi-tier legacy applications from on-premises to AWS-native frameworks.

Qualifications

• Experience: 8+ years in enterprise networking, with at least 5 years specifically focused on AWS Cloud Architecture.

Certifications (Required/Preferred)

• AWS Certified Advanced Networking – Specialty (Highly Preferred).
• AWS Certified Solutions Architect – Professional.
• CCIE/CCNP or equivalent professional-level networking certification.

Soft Skills

• Leadership: Experience mentoring junior engineers and leading cross-functional projects.
• Stakeholder Management: Ability to translate complex technical concepts for C-level executives and non-technical stakeholders.
• Problem Solving: Strategic thinker capable of resolving high-stakes architectural challenges and disaster recovery planning.

Roles & Responsibilities

• Architectural Strategy: Design and document enterprise-grade AWS network architectures, including Multi-Account structures using AWS Control Tower and Organizations.
• Hybrid Connectivity: Implement complex hybrid patterns using AWS Direct Connect, Transit Gateway, and Site-to-Site VPN to link global sites with AWS VPCs.
• Security & Compliance: Lead the design of Zero-Trust network frameworks, implementing AWS Network Firewall, WAF, and micro-segmentation through Security Groups and NACLs.
• Automation (IaC): Standardize infrastructure deployment using Terraform or CloudFormation to eliminate manual configuration and ensure reproducibility.
• Network Governance: Establish and enforce standards for IP address management (IPAM), DNS (Route 53), and load balancing (ALB/NLB/GWLB).
• Performance & Observability: Design monitoring solutions using Amazon CloudWatch, VPC Flow Logs, and Traffic Mirroring to proactively identify and resolve bottlenecks.
• Cost Optimization: Analyze data transfer patterns and architect solutions to minimize AWS egress costs and resource waste.

Salary Range- $100,000-$140,000 a year