Network Architect

Optimal Growth Technologies; Cape Town; On-site; ZAR 600 000 - 900 000; Full time

Job summary

A leading technology solutions provider in Cape Town seeks a Network Architect to design and implement high-performance network architectures. The ideal candidate will oversee security measures and optimize cloud networking solutions. Strong experience with enterprise firewalls and expertise in network protocols is essential. This role offers a dynamic work environment and opportunities for professional growth.

Qualifications

• Expert-level experience with enterprise firewall platforms and security policies.
• Strong expertise in network protocols including BGP, OSPF, and MPLS.
• Experience with Cisco, Juniper, and Palo Alto network solutions.

Responsibilities

• Design and implement scalable network architectures.
• Configure and optimize firewalls and network security devices.
• Oversee maintenance of LAN, WAN, and cloud networking solutions.

Skills

Expert-level experience with enterprise firewall platforms

Strong expertise in network protocols

Experience with Cisco, Juniper, Palo Alto solutions

Hands-on knowledge of Layer 2/3 switching

Proficiency in network security solutions

Deep understanding of cloud networking

Scripting and automation skills

Education

Bachelor's or Master's degree in Computer Science

Cisco CCNP/CCIE Preferred

Fortinet NSE4/NSE7 Advantageous

AWS or Azure Networking Certifications

Job description

Key Responsibilities

Design and implement scalable, high-performance network architectures for enterprise environments. Define and enforce networking standards, policies, and best practices. Develop secure, redundant, and high-availability network designs for data centers, branch offices, and cloud environments. Evaluate and recommend network technologies, hardware, and software to optimize performance.

• Firewall & Security: Configure, manage, and optimize next-generation firewalls and network security devices. Design and implement firewall policies, rule sets, and security zones to align with industry best practices. Conduct firewall performance tuning, troubleshooting, and security audits. Implement intrusion detection and prevention (IDS/IPS) solutions and enforce Zero Trust Network principles. Stay updated with emerging technologies, threat intelligence, and security patches.
• Network Administration & Optimization: Oversee the configuration, monitoring, and maintenance of enterprise LAN, WAN, MPLS, SD-WAN, and VPN infrastructures. Implement QoS, traffic shaping, and network segmentation to enhance performance and security. Ensure network redundancy, failover, and load balancing for mission‑critical applications. Troubleshoot complex network performance issues and lead root cause analysis.
• Cloud Networking: Design and implement secure cloud networking solutions on AWS, Azure, and Google Cloud. Integrate cloud‑native security controls and firewalls. Deploy VPNs, ExpressRoute, Direct Connect, and SD‑WAN solutions for hybrid cloud connectivity. Ensure secure API and container‑based networking within cloud and microservices environments.
• Network Security & Compliance: Ensure compliance with ISO 27001, NIST, PCI‑DSS, GDPR, and other regulatory standards. Implement Zero Trust Security, Network Access Control (NAC), and micro‑segmentation. Conduct vulnerability assessments, penetration testing, and risk mitigation for network security. Work with cybersecurity teams to integrate SIEM (e.g., Splunk, Sentinel, QRadar) and threat intelligence solutions.
• Network Automation & Monitoring: Deploy and manage network monitoring tools (e.g., SolarWinds, PRTG, Nagios, Zabbix) for proactive issue detection. Automate network operations using Python, Ansible, Terraform, and REST APIs. Implement log management and correlation for security event detection. Optimize network configuration management using NCM and compliance reporting tools.
• Technical Leadership & Documentation: Act as a subject matter expert (SME) for networking and security architectures. Provide mentorship and technical guidance to junior network engineers and security teams. Develop and maintain network diagrams, SOPs, technical documentation, and security policies. Collaborate with cross‑functional teams (Cloud, Security, DevOps, Infrastructure) to align network strategies with business goals.

Required Skills & Qualifications

Education & Certifications

• Bachelor's or Masters degree in Computer Science, Network Engineering, or a related field.
• Cisco CCNP/CCIE (Enterprise, Security, or Data Center) Preferred
• Fortinet NSE4/NSE7 Advantageous
• AWS or Azure Networking Certifications (e.g., AWS Advanced Networking, Azure Network Engineer Associate)

Technical Skills

• Expert-level experience with enterprise firewall platforms and security policies.
• Strong expertise in network protocols (BGP, OSPF, EIGRP, VXLAN, MPLS, SD‑WAN).
• Experience with Cisco, Juniper, Palo Alto, Fortinet, and Aruba network solutions.
• Hands‑on knowledge of Layer 2/3 switching, VLANs, STP, and redundancy protocols (HSRP, VRRP, GLBP).
• Proficiency in network security solutions (NGFW, IPS/IDS, SIEM, NAC, DDoS protection).
• Deep understanding of cloud networking (VPC, VNET Peering, Direct Connect, ExpressRoute).
• Scripting and automation skills in Python, Ansible, Terraform, or PowerShell.

Soft Skills

• Strong analytical and problem‑solving abilities.
• Excellent communication, documentation, and stakeholder management skills.
• Ability to lead teams, mentor engineers, and manage multiple projects simultaneously.
• Self‑motivated with a passion for cybersecurity, network engineering, and automation.