Network Architect

Mphasis; New York (NY); On-site; USD 150,000 - 180,000; Full time

Job summary

A leading global technology company is seeking a Network Architect to oversee network design and delivery for a new data center. The successful candidate will collaborate with various teams to ensure a production-grade network that meets critical workload and security demands. Key responsibilities include defining network architecture, implementing data center fabric, and establishing documentation standards. Ideal candidates should have 8-12 years of experience in enterprise networking and a strong background in technologies such as BGP and EVPN/VXLAN.

Qualifications

• 8-12+ years in enterprise network architecture, especially in data center builds.
• Expertise in BGP, EVPN/VXLAN, and network redundancy.
• Proven skills in creating HLD/LLD and operational standards.

Responsibilities

• Define and implement target-state network architecture.
• Architect data center fabric and design security zones.
• Create documentation and maintain operational standards.

Skills

Network Architecture

Data Center Networking

BGP

EVPN/VXLAN

Segmentation

Firewall Integration

Documentation

Tools

Cisco ACI

F5

Palo Alto Firewalls

Job description

We are seeking a Network Architect to lead network design and technical delivery for a new data center (primary/secondary). This role partners with security, computer, storage, backup/DR, and facilities teams to implement a production‑grade network that supports critical workloads, tight security controls, and predictable operations. The architect owns the network target state, standards, configurations, testing, and migration/cutover governance.

Key Responsibilities

• Network Architecture & Strategy: Define target‑state DC network architecture including fabric design, routing strategy, segmentation model, and operational standards aligned to resiliency and security requirements.
• Data Center Fabric: Architect and guide implementation of leaf‑spine with EVPN/VXLAN and/or Cisco ACI (or equivalent); define underlay/overlay, BGP, MTU/jumbo frames, and control‑plane protections.
• Segmentation & Security Zones: Design VRF/VLAN strategy, micro‑segmentation alignment (where applicable), east‑west controls, firewall placement, and north‑south security boundaries in coordination with InfoSec.
• DC Interconnect (DCI) & WAN Edge: Design DCI between DC1/DC2, connectivity to WAN/Internet/cloud, redundancy, QoS, and routing policy (BGP/OSPF as required).
• Core Network Services: Own integration patterns for DNS/DHCP/IPAM (Infoblox or equivalent), NTP, PKI/cert dependencies, TACACS/RADIUS, and network management.
• Load Balancing & Traffic Services: Partner on L4–L7 design (e.g., F5 or equivalent), VIP standards, failover, and integration with security zones.
• Observability & Operations: Define monitoring/telemetry (SNMP/streaming telemetry), syslog/SIEM integration, NetFlow/IPFIX, alerting standards, and operational runbooks.
• Implementation Governance: Validate BOMs and vendor designs, lead build MOPs, configuration standards, peer reviews, and testing/acceptance criteria.
• Migration & Cutover Support: Create cutover plans for network moves (routing changes, VLAN extensions, DCI cutovers), rollback procedures, and validation checklists; support window change.
• Documentation & Standards: Maintain network HLD/LLD, diagrams, IP plans, naming conventions, port maps, and “as‑built” documentation.

Required Qualifications

• 8–12+ years in enterprise network architecture with delivery leadership in new DC builds or major network transformations.
• Deep expertise in DC networking concepts: BGP, EVPN/VXLAN, leaf‑spine, routing policy, redundancy, and high availability design.
• Strong experience with segmentation: VRFs/VLANs, security zoning, and firewall integration.
• Proven ability to produce HLD/LLD, standards, MOPs, and operational runbooks.
• Strong stakeholder leadership across security, compute, storage, and facilities with clear communication and decision‑making.

Preferred

• Experience with Cisco ACI, Nexus/Arista/Juniper fabrics, and multi‑DC DCI patterns.
• Exposure to Palo Alto (or equivalent firewalls) and F5 (or equivalent load balancers).
• Familiarity with regulated environments (banking/healthcare) and audit‑ready operational controls.