Azure Networking Architect- W2

Key responsibilities 
Network architecture & design 
• Architect hub-and-spoke and vWAN topologies across multi-subscription environments.
 • Implement Azure Route Server (ARS) to simplify dynamic route exchange between VNets and network virtual appliances.
 • Design secure connectivity patterns using VNets, peering, UDRs, NSGs, Azure Firewall, Application Gateway, and Load Balancer.
 • Integrate virtual appliances such as: • • • Cisco vMX for SD-WAN and secure branch connectivity. Netskope for cloud security and secure web gateway services. SolarWinds for network monitoring, performance management, and observability.

Migration projects 
• Lead network architecture and design workstreams for large-scale migration projects, moving on-premises workloads and network topologies into Azure. 
• Assess existing on-premises network estates (routing, firewalls, WAN links) and define target-state Azure network designs and migration sequencing.
 • Partner with infrastructure, security, and application teams to plan cutover, minimize downtime, and validate connectivity post-migration. 
• Produce migration runbooks, network design documents, and as-built documentation for each migration wave.

Required skills & experience Technical expertise 
• Deep knowledge of Azure networking services (VNets, ARS, vWAN, NSGs, Azure Firewall, Application Gateway). 
• Hands-on experience with virtual appliances (Cisco vMX, Netskope, SolarWinds)
.• Strong understanding of BGP, dynamic routing, and hybrid connectivity.
 • Infrastructure as Code (Terraform) with automation. 
• Proven experience delivering network architecture for cloud migration projects (on-premises to Azure). 
• Working knowledge of IP address planning and CIDR allocation for large, multi-environment Azure landing zones. 

Experience & qualifications 
• 15+ years of overall networking experience, including extensive experience designing and operating Azure networking at scale. 
• Demonstrated experience as a lead or senior architect on at least one large-scale Azure migration engagement. 
• Azure certifications preferred: AZ-700 (Azure Network Engineer Associate), AZ-305 (Azure Solutions Architect Expert).
 • Vendor certifications a plus: Cisco (CCNP/CCIE), Netskope NCCA/NCCE, or equivalent SolarWinds certifications. 

Soft skills • Strong stakeholder communication skills, able to explain network design trade-offs to both technical and non-technical audiences. • Comfortable leading design workshops and producing clear architecture documentation. • Collaborative, cross-functional mindset - works closely with security, infrastructure, and application teams. • Structured, methodical approach to troubleshooting complex, multi-vendor networ