Cloud Network Architect

Position Overview:

WWT is seeking two Cloud Architects (Architect #1 and Architect #2) to serve as subject matter experts in cloud networking across Amazon Web Services (AWS), Microsoft Azure and Google Cloud Platform (Google Cloud Platform), with strong Domain Name System, Dynamic Host Configuration Protocol and IP Address Management (DDI) expertise using Infoblox. The Cloud Architects will design secure, scalable and consistent hybrid and multi-cloud network connectivity and help ensure enterprise DNS, DHCP and IP address management services are reliable and automated.

The role collaborates openly with architects, engineers, project managers and customer stakeholders. Successful candidates share knowledge, document work for others and communicate clearly in a team setting.

Responsibilities:

• Architect multi-cloud networking, including Virtual Private Cloud (VPC) and Virtual Network (VNet) design, AWS Transit Gateway, Azure Virtual WAN, Google Cloud Router, hub-and-spoke architectures and landing-zone patterns.
• Design and operate hybrid connectivity using AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect and virtual private networks (VPNs), including Border Gateway Protocol (BGP) routing and resiliency.
• Define cloud network security patterns, including segmentation, security groups, network security groups (NSGs), firewall rules, private endpoints and inspection architectures.
• Own the Infoblox DDI architecture, including Grid design, DNS services and hybrid/cloud-integrated resolution, DHCP, IPAM, DNS security and Network Identity Operating System (NIOS) upgrades.
• Integrate Infoblox with cloud platforms and automation workflows for IPAM and DNS record lifecycle management.
• Develop Infrastructure as Code using Terraform, AWS CloudFormation and Azure Bicep, including reusable modules for network provisioning.
• Advise cloud, security and application teams on network design, cost, performance and operational best practices.

Qualifications:

Required qualifications

• 8+ years of enterprise networking experience, including 4+ years designing cloud networks.
• Production experience with networking in at least two of AWS, Azure and Google Cloud Platform, with working knowledge of the third platform.
• Hands-on Infoblox experience with NIOS Grid, DNS, DHCP and IPAM at enterprise scale.
• Strong knowledge of BGP, DNS architecture, IP addressing and hybrid connectivity.
• Experience with Infrastructure as Code and automation.

Preferred qualifications

• Experience integrating Infoblox with cloud providers, including Universal DDI and NIOS-X, and implementing DNS security using BloxOne Threat Defense.
• Experience with Palo Alto Networks firewalls and native cloud network security services.
• Experience working in a regulated industry.

Preferred certifications

• AWS Certified Advanced Networking - Specialty.
• Microsoft Certified: Azure Network Engineer Associate.
• Google Cloud Professional Cloud Network Engineer.
• Infoblox certification.

Tools and Technologies:

AWS networking services; Microsoft Azure networking services; Google Cloud networking services; Infoblox NIOS Grid, DNS, DHCP, IPAM, Universal DDI, NIOS-X and BloxOne Threat Defense; BGP; Palo Alto Networks; native cloud firewalls; Terraform; AWS CloudFormation; Azure Bicep.