Network Architect (10+ years exp) Location: – Irvine, CA contract

Tech Mirrors; Irvine (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Tech Mirrors is seeking a Network Architect with 10+ years of experience to lead enterprise network design in Irvine, CA. The role focuses on migrating data centers to AWS and building secure, scalable connectivity across multi-account landing zones.

You will design Direct Connect/VPN architectures, implement DNS/Route53 strategies, and drive IaC-driven provisioning. Strong emphasis on security, segmentation, and observability is required.

Qualifications

• Extensive enterprise network design experience.
• Experience migrating data centers to AWS.
• Strong knowledge of firewalls, routing, VPN/IPsec.
• Solid AWS networking: VPC, subnets, TGW, Route 53, ALB/NLB.
• Understanding of Java/.NET apps, TIBCO ESB, and Exadata connectivity.

Responsibilities

• Develop end-to-end network architecture for Data Center Exit migrations.
• Design hybrid connectivity using Direct Connect, VPN, and routing policies.
• Build AWS VPC patterns, TIBCO zones, and secure DB connectivity for Exadata.
• Define firewall policies, segmentation, and load balancer migration to AWS.
• Lead DNS migration strategies involving Route 53 and resolver endpoints.
• Automate network provisioning using IaC frameworks.
• Coordinate with app, DB, and security teams for dependency mapping.
• Implement observability - flow logs, metrics, testing for SLA.
• Produce runbooks, documentation, and readiness artifacts.

Skills

Enterprise network design

AWS networking design

Direct Connect/VPN routing

BGP routing

DNS/DHCP/IPAM

Firewalls/Load balancers

Zero Trust/Segmentation

Data center migrations

Observability/flow logs

IaC automation

Tools

Terraform/CloudFormation

Git-based automation

AWS VPC/TGW/Route53

Job description

Network Architect (10+ years exp)
Location: Irvine, CA
contract

Required Skills

• Extensive experience designing enterprise networks and leading data center migrations to AWS.
• Strong knowledge of firewalls, routers/switches, F5, routing protocols, VPN/IPsec.
• Proficient in DNS, DHCP, IPAM, and DNS migration strategies.
• Solid AWS networking: VPC, subnets, TGW, Route 53, ALB/NLB, Network Firewall.
• Understanding of Java/.NET application tiers, TIBCO ESB, and Oracle Exadata connectivity.
• Familiar with Windows Server 2016-2025 and RHEL 7-9 network services.
• Experience with Terraform/CloudFormation and Git-based automation.
• Strong troubleshooting using flow logs, packet analysis, and monitoring tools.
• Knowledge of Zero Trust, segmentation, and compliance frameworks.

Responsibilities and Duties

• Develop end-to-end network architecture for Data Center Exit migrations.
• Design hybrid connectivity using Direct Connect, VPN, and routing policies.
• Build AWS VPC patterns, TIBCO zones, and secure DB connectivity for Exadata.
• Define firewall policies, segmentation, and load balancer migration from F5 to AWS.
• Lead DNS migration strategies involving Route 53 and resolver endpoints.
• Automate network provisioning using IaC frameworks.
• Coordinate with app, DB, and security teams for dependency mapping.
• Implement observability - flow logs, metrics, testing for SLA assurance.
• Produce runbooks, documentation, and operational readiness artifacts.

Cloud Experience Needed

• Hands-on AWS networking design across multi-account landing zones.
• Expertise in Direct Connect, DX Gateway, VPN, and BGP routing.
• Strong Route 53 knowledge - failover, private zones, resolver endpoints.
• Experience converting F5 load balancing/WAF patterns into AWS equivalents.
• Strong understanding of AWS security controls and VPC endpoints.
• Ability to design secure connectivity for Oracle Exadata on AWS.