Connectivity and Cloud Architect

We are seeking a skilled Connectivity and Cloud Architect to join our Infrastructure area. You will design, implement, and maintain robust network architectures across hybrid on-premise and AWS cloud environments, with a strong focus on routing (BGP), connectivity, and DNS architecture, working closely with our Enterprise Architect, infrastructure, and network teams to ensure seamless integration and optimal performance across all
systems.

A taster of what you will be involved with:

• Network Architecture Design: Design and develop scalable, secure network architectures across hybrid on-premise and AWS cloud environments, including routing, connectivity, and integration patterns.
• AWS Network Architecture: Lead design and implementation of AWS networking components, including Transit Gateways, VPC connectivity, ACLs, Network Firewalls, Cloud WAN, and Route 53.
• Hybrid Connectivity: Design and manage AWS Direct Connect and Site-to-Site VPN architectures linking on-premise and cloud environments.
• Routing and BGP: Design, implement, and maintain complex routing architectures leveraging advanced protocols such as BGP and OSPF to ensure resilient, performant connectivity.
• DNS Architecture: Design, implement, and maintain DNS architecture across on-premise and cloud environments, ensuring scalability, resiliency, and security.
• Disaster Recovery Network Design: Design and maintain resilient network architectures supporting disaster recovery and business continuity.
• Network Management: Oversee configuration, management, and optimisation of network devices (routers, switches, firewalls, VPNs), ensuring network security and compliance with best practices.
• Automation and Tooling: Use Git, Terraform, Bash, and Ansible to automate and manage infrastructure and network configuration as code.
• Collaboration and Communication: Work with cross-functional teams to gather requirements, provide technical guidance, and ensure alignment with business objectives.
• Documentation and Best Practices: Develop and maintain documentation, diagrams, and SOPs for network and cloud architectures, promoting industry best practices and compliance.

What we are looking for:

Education:

• Bachelor’s degree in Computer Science, Information Technology, or a related field
• 3+ years of proven experience as a Systems Architect, Network Architect, Cloud Architect, or similar role in a complex IT environment
• Strong understanding of AWS Cloud security and infrastructure security, including network and server security
• Relevant certifications (e.g., AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect, CCNP) are a plus

Work Experience:

• Strong expertise in designing and implementing hybrid (on-premise and cloud) network architectures
• Strong, hands-on AWS network experience, particularly with Transit Gateways, ACLs, Network Firewalls, Cloud WAN, VPC connectivity, EKS
  networking, and Route 53
• Hands-on experience with AWS Direct Connect and VPN Gateway architectures for hybrid connectivity
• Experience designing and implementing complex routing architectures, leveraging advanced protocols such as BGP and OSPF
• Strong knowledge of DNS architecture design, implementation, and management across on-premise and cloud environments
• Experience designing disaster recovery and business continuity network architectures
• Experience with load balancing technologies (e.g., AWS ALB/NLB or equivalent on-premise solutions)
• Experience with network monitoring and observability tooling (e.g., VPC Flow Logs, CloudWatch, NetFlow)
• Working knowledge of IPv6
• In-depth knowledge of networking protocols, security principles, and best practices
• Strong familiarity with Git, including branching, automation workflows, and merging strategies
• Excellent skills in Terraform, Bash, and Ansible
• Strong background in Linux administration
• Understanding of microservice design and architectural patterns
• Experience with Kubernetes/EKS networking, including CNI plugins and service mesh
• In-depth knowledge of on-premises infrastructure, including servers, SAN/NAS storage devices, fibre channel networks, and backup infrastructures
• Proficiency in Active Directory administration, including domain management, group policies, LDAP, and SAML integrations
• Familiarity with virtualisation technologies (VMware, Hyper-V, etc.) and containerisation (Docker, Kubernetes)
• Excellent analytical, problem-solving, and decision-making skills
• Strong communication and interpersonal abilities, with a collaborative mindset

Other Requirements:

• Proven practical communication skills (written and verbal) to articulate platform architecture to other Architects (Area and Enterprise), Area Product Managers, and technical teams
• Adherence to best practices in documentation, testing, security, and efficient use of resources
• Experience with identity solutions
• Awareness of relevant regulatory and compliance frameworks (e.g., PCI-DSS, ISO 27001) as they apply to network and infrastructure security