Senior Network Architect - AWS & Data Center Migrations

Tech Mirrors; Irvine (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Tech Mirrors is seeking a Network Architect with 10+ years of experience to lead enterprise network design in Irvine, CA. The role focuses on migrating data centers to AWS and building secure, scalable connectivity across multi-account landing zones.

You will design Direct Connect/VPN architectures, implement DNS/Route53 strategies, and drive IaC-driven provisioning. Strong emphasis on security, segmentation, and observability is required.

Qualifications

• Extensive enterprise network design experience.
• Experience migrating data centers to AWS.
• Strong knowledge of firewalls, routing, VPN/IPsec.
• Solid AWS networking: VPC, subnets, TGW, Route 53, ALB/NLB.
• Understanding of Java/.NET apps, TIBCO ESB, and Exadata connectivity.

Responsibilities

• Develop end-to-end network architecture for Data Center Exit migrations.
• Design hybrid connectivity using Direct Connect, VPN, and routing policies.
• Build AWS VPC patterns, TIBCO zones, and secure DB connectivity for Exadata.
• Define firewall policies, segmentation, and load balancer migration to AWS.
• Lead DNS migration strategies involving Route 53 and resolver endpoints.
• Automate network provisioning using IaC frameworks.
• Coordinate with app, DB, and security teams for dependency mapping.
• Implement observability - flow logs, metrics, testing for SLA.
• Produce runbooks, documentation, and readiness artifacts.

Skills

Enterprise network design

AWS networking design

Direct Connect/VPN routing

BGP routing

DNS/DHCP/IPAM

Firewalls/Load balancers

Zero Trust/Segmentation

Data center migrations

Observability/flow logs

IaC automation

Tools

Terraform/CloudFormation

Git-based automation

AWS VPC/TGW/Route53

Job description

Tech Mirrors is seeking a Network Architect with 10+ years of experience to lead enterprise network design in Irvine, CA. The role focuses on migrating data centers to AWS and building secure, scalable connectivity across multi-account landing zones.

You will design Direct Connect/VPN architectures, implement DNS/Route53 strategies, and drive IaC-driven provisioning. Strong emphasis on security, segmentation, and observability is required.