[Hiring] Cloud Network Architect @Aqilea (formerly Soltia)

Role Description

We are looking for a Cloud Network Architect – Azure to design, implement and optimize scalable, secure hybrid and multi‑cloud network architectures. The role focuses on Azure networking expertise, network automation (IaC) and DevOps practices to modernize network infrastructure and enable cloud migrations. The architect will lead network transformation initiatives and collaborate with cross‑functional teams to deliver robust, high‑performance networking solutions.

Responsibilities

• Architect and design scalable, secure, highly available Azure network solutions including topology diagrams, IP schemes and security policies.
• Design hybrid connectivity between on‑premises data centers and Azure using ExpressRoute, VPN Gateway and Virtual WAN.
• Develop network architecture standards, patterns and best practices for cloud and hybrid environments.
• Design multi‑region and multi‑cloud network architectures for global connectivity and disaster recovery.
• On-Premises Network Integration:
  • Design and implement connectivity between on‑premises networks and Azure cloud infrastructure.
  • Configure and maintain BGP peering between on‑premises routers and Azure Route Server/ExpressRoute.
  • Integrate on‑premises network security policies with cloud security controls and migrate services to cloud‑native equivalents.
• Network Automation & DevOps:
  • Develop Infrastructure as Code templates (Terraform, ARM, Bicep) for network provisioning and build CI/CD pipelines using Azure DevOps or GitHub Actions.
  • Automate network configuration, monitoring and troubleshooting using PowerShell, Azure CLI, Python and Ansible.
  • Implement GitOps practices, create self‑service network provisioning portals/APIs, and develop automated testing and remediation frameworks.
• Security & Compliance:
  • Design and implement network security architectures including segmentation, micro‑segmentation and Zero Trust principles.
  • Configure Azure Firewall, NSGs, ASGs and route tables for defense‑in‑depth and implement encryption for transit and remote access solutions.
  • Perform network security assessments and ensure compliance with regulatory requirements and security standards.
• Monitoring & Operations:
  • Implement comprehensive network monitoring using Azure Monitor, Log Analytics and Network Watcher with flow logging and alerting.
  • Develop runbooks, automated remediation workflows, capacity planning and maintain CMDB and network documentation.
• Collaboration & Leadership:
  • Lead architecture reviews, provide technical guidance, mentor junior engineers and collaborate with cloud, security and application teams.
  • Interface with vendors and service providers and present architecture proposals to stakeholders.
• Strategic Initiatives:
  • Drive network modernization and cloud migration initiatives, evaluate emerging technologies and develop network automation roadmaps.

Qualifications

• Azure Virtual Network (VNet) design and implementation
• Azure ExpressRoute configuration and optimization
• Azure VPN Gateway and Site-to-Site/Point-to-Point VPN
• Azure Load Balancer (ALB/NLB) and Application Gateway
• Azure Traffic Manager and Front Door
• Azure Firewall and Network Virtual Appliances (NVAs)
• Azure Private Link and Private Endpoint
• Azure Virtual WAN and SD-WAN integration
• Azure Network Watcher and monitoring
• Azure DDoS Protection and network security
• Hub-and-spoke network topology design
• Azure Route Server and BGP configuration
• Enterprise routing protocols (BGP, OSPF, EIGRP)
• Switching technologies (VLAN, VXLAN, STP, HSRP/VRRP)
• MPLS and WAN technologies
• Software-Defined Networking (SDN) and SD-WAN
• Network security (firewalls, IDS/IPS, VPN concentrators)
• Load balancers (F5, Citrix ADC, HAProxy)
• Wireless networking (Aruba, Cisco, Ruckus)
• Data center networking (Cisco Nexus, Arista, Juniper)
• Infrastructure as Code (Terraform, ARM Templates, Bicep)
• Azure DevOps and GitHub Actions for network CI/CD
• PowerShell and Azure CLI scripting
• Python for network automation
• Ansible for network configuration management
• Git version control and GitOps practices
• Configuration management and policy as code
• Hybrid cloud connectivity patterns
• Multi-cloud network architecture (Azure, AWS, GCP)
• Cloud interconnection and peering
• DNS and traffic management across environments
• Disaster recovery and business continuity networking

Nice-to-have

• Network function virtualization (NFV)
• Service mesh architectures (Istio, Linkerd)
• Container networking (CNI, Calico, Cilium)
• Kubernetes networking concepts
• Zero Trust Network Architecture (ZTNA)
• SASE (Secure Access Service Edge) solutions
• Azure Security Center and Azure Sentinel
• Network segmentation and micro-segmentation
• Cloud security posture management (CSPM)
• Compliance frameworks (ISO 27001, SOC 2, PCI-DSS, HIPAA)
• Azure Monitor and Log Analytics
• Network performance monitoring tools
• SNMP and flow-based monitoring (NetFlow, sFlow)
• Prometheus and Grafana for network metrics
• Cisco ACI and SD-Access
• VMware NSX and network virtualization
• BGP EVPN and VXLAN implementations
• API gateway and service mesh technologies