Network Technology Lead (Architect)

Virtual Tech Gurus; United States; Hybrid; USD 180,000 - 240,000; Full time

Job summary

Virtual Tech Gurus seeks a Network Technology Lead to serve as the senior hands‑on design authority for a globally distributed enterprise network. You will define network architecture standards, guide design decisions, and drive a long‑term technology roadmap across WAN, LAN, data center, internet edge, cloud interconnect, and critical transport environments.

The ideal candidate brings deep technical expertise, credibility, and collaboration skills to influence outcomes with stakeholders across

Qualifications

• Active CCIE certification required (Enterprise Infrastructure, Service Provider, or Data Center).
• 10+ years of progressive network engineering experience, with 5+ years in senior architecture roles.
• Experience designing EVPN/VXLAN in production environments.
• Experience with SD-WAN or SASE in enterprise settings.
• Ability to influence outcomes without direct authority and set standards.

Responsibilities

• Serve as senior technical decision-maker for network architecture and design across WAN, LAN, data center, internet edge, cloud interconnect, and transport environments.
• Develop and maintain network architecture standards, reference designs, and decision records.
• Lead 12–24 month network technology roadmap aligned with business, security, and ops priorities.
• Own SD-WAN/SASE architecture including site design, policy models, and identity/security integration.
• Define telemetry, observability, and automation to improve config consistency and change safety.

Skills

BGP architecture

EVPN/VXLAN design

SD-WAN/SASE expertise

Network automation (Python/Ansible)

Communication & stakeholder management

Travel readiness

Education

CCIE certification

Bachelor's degree in CS/Engineering or related

Tools

Python

Ansible

Infrastructure as Code

Job description

Responsibilities:

Network Technology LeadPosition OverviewWe are seeking a Network Technology Lead to serve as the senior hands‑on design authority for a complex, globally distributed enterprise network. This role will define network architecture, establish technical standards, guide design decisions, and shape the long‑term technology roadmap across WAN, LAN, data center, internet edge, cloud interconnect, and critical transport environments. The ideal candidate combines deep technical expertise with the ability to influence outcomes through credibility, collaboration, and sound engineering judgment. This position does not have direct reports; instead, it partners closely with network engineering, cybersecurity, operations, vendors, carriers, and executive stakeholders to drive scalable, secure, and resilient network solutions.Key ResponsibilitiesArchitecture and Design Leadership

• Serve as the senior technical decision-maker for network architecture and design across WAN, LAN, data center, internet edge, cloud interconnect, and critical transport environments.
• Develop and maintain network architecture standards, reference designs, design documentation, and technical decision records.
• Review and approve designs proposed by internal engineering teams, integrators, carriers, and technology vendors.
• Build and maintain a 12- to 24-month network technology roadmap aligned with business, operational, and security priorities. Routing, Transport, and Interconnect
• Lead BGP policy and architecture for internet-edge, carrier, colocation, and cloud connectivity, including route policy, traffic engineering, resiliency, and failover.
• Design and govern optical and carrier transport solutions, including capacity planning, path diversity, availability, and latency requirements.
• Define EVPN/VXLAN architecture and standards for data center and distributed network environments. SD-WAN, SASE, and Security
• Own the SD-WAN and SASE architecture, including site design, policy models, point-of-presence strategy, and integration with identity and security controls.
• Partner with cybersecurity teams on firewall architecture, segmentation, zero-trust initiatives, and remediation of security assessment findings. Visibility, Automation, and Operational Enablement
• Define network telemetry, observability, and performance-monitoring standards and use operational data to guide design and capacity decisions.
• Establish automation and infrastructure-as-code practices that improve configuration consistency, validation, and change safety.
• Serve as an escalation point for complex incidents and root-cause analysis, translating findings into durable architecture improvements and standards. Stakeholder and Partner Engagement
• Present network architecture, risks, recommendations, and investment priorities to technical and executive stakeholders.
• Lead technical evaluations of vendors, carriers, and integrators, including requirements development, solution review, and acceptance criteria.
• Produce clear design documentation and decision records that support audit, compliance, and operational readiness.
• Mentor engineers and strengthen architecture and design practices across the broader network team.
• Technology EnvironmentCandidates should be prepared to work across a multi-vendor environment that may include:
• Routing and edge: BGP, route policy, communities, traffic engineering, internet edge, and carrier interconnects
• Data center and LAN: EVPN/VXLAN fabrics, distributed LAN environments, and operational technology integration
• WAN and SASE: SD-WAN, SASE, MPLS, and dedicated internet access services
• Cloud and colocation connectivity: cloud on‑ramps, direct cloud connections, and colocation fabrics
• Transport: high‑capacity carrier and optical circuits, path diversity, and latency management
• Security: next‑generation firewalls, segmentation, zero‑trust architecture, and regulated control environments
• Visibility: network observability, flow analytics, and performance telemetry
• Automation: Python, Ansible, infrastructure as code, and configuration validation
• Required Qualifications
• Active CCIE certification in any track; Enterprise Infrastructure, Service Provider, or Data Center is preferred. A certification number must be provided during the selection process and will be verified.
• Must qualify as a U.S. Person under applicable export‑control regulations because the role may access export‑controlled technical data.
• 10 or more years of progressive network engineering experience, including at least five years in a senior architecture or design‑authority capacity within a production enterprise, carrier, or service‑provider environment.
• Demonstrated ownership of BGP architecture and policy at scale, including the ability to explain design tradeoffs, resiliency strategies, and failure scenarios.
• Hands‑on experience designing and implementing EVPN/VXLAN in production environments.
• Experience designing SD‑WAN or SASE solutions; experience with leading enterprise platforms is strongly preferred.
• Experience with carrier interconnects, colocation connectivity, and cloud on‑ramp design.
• Proven ability to influence technical outcomes without direct authority and establish standards adopted by engineering teams.
• Strong written and verbal communication skills, including the ability to produce design documentation, decision records, and executive‑level summaries.
• Ability to travel to office, data center, and partner locations as needed, estimated at 10% to 15%. Preferred Qualifications
• CCDE certification or multiple active CCIE certifications.
• Experience in satellite communications, telecommunications, carrier, ISP, or other highly available network environments.
• Experience with optical transport and latency‑sensitive traffic.
• Experience using flow analytics or comparable observability platforms to guide architecture and capacity decisions.
• Firewall architecture experience and familiarity with SOC 2, NIST 800‑171, or comparable compliance frameworks.
• Experience supporting network workstreams for mergers, acquisitions, or infrastructure integrations.
• Network automation experience using Python, Ansible, or infrastructure‑as‑code practices.
• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent professional experience.
• Work ArrangementThis is a U.S.-based role. Remote candidates may be considered, with regular on‑site presence and travel to company, data center, and partner locations as business needs require.
• Engagement Details
• Six‑month contract‑to‑hire engagement
• Full‑time schedule of 40 hours per week
• Conversion to a permanent position based on mutual agreement and successful performance during the contract period
• Target start date within 30 days of candidate selection Qualified applicants will be considered based on their skills, experience, and ability to meet the role's technical, regulatory, and work‑arrangement requirements