Key responsibilities
Architecture and design
Own the end-to-end network architecture across BETSOL offices, data center and colocation sites, and cloud environments, including target-state designs and a multi-year roadmap.
Design LAN, WAN and SD-WAN topologies, routing (BGP, OSPF), segmentation and high-availability patterns, and document them as reference architectures and high- and low-level designs.
Design hybrid and multi-cloud connectivity for Azure and AWS: VNet/VPC architecture, hub-and-spoke and transit designs, ExpressRoute or Direct Connect, site-to-site VPN and private endpoints.
Define network standards: addressing and IP management, naming, configuration baselines, hardware and software lifecycle, and capacity planning.
Network security and zero trust
Design and own next-generation firewall policy architecture, micro-segmentation and secure remote access.
Lead the move toward a zero trust and SASE model, including secure web gateway and private access services, in partnership with the security team.
Build network controls and evidence that satisfy ISO/IEC 27001 audits and customer security reviews, and remediate network findings from vulnerability scans and penetration tests.
Design DNS, DDoS protection, web application firewall and load-balancing patterns for internet-facing services.
Project leadership and delivery
Lead network projects such as office build-outs, data center migrations, SD-WAN rollouts, firewall refreshes and cloud landing zones, from requirements and design through implementation and cutover.
Write implementation and rollback plans, lead change reviews, and execute or supervise high-risk changes during planned windows.
Evaluate vendors and technologies, run proofs of concept, and produce build-versus-buy recommendations with cost estimates.
Work with cloud, DevOps, security and application teams so network design is part of solution design from the start, not an afterthought.
Automation and engineering excellence
Automate configuration, compliance checks and provisioning using Python, Ansible and Terraform, and manage network configuration as code with version control.
Define observability for the network (telemetry, flow data, synthetic checks and meaningful alerts) so operations teams detect issues before users do.
Act as the final technical escalation point for complex design-level problems, lead root cause analysis, and drive permanent architectural fixes.
Mentor network engineers, review their designs and changes, and build runbooks and knowledge so the operations team can run the network independently.
Required qualifications
8+ years of network engineering experience, including at least 2 years in a lead or architect capacity owning designs and projects end to end.
Deep expertise in routing and switching (BGP, OSPF, VLANs, VRFs, QoS) and enterprise WAN or SD-WAN design.
Hands-on design experience with next-generation firewalls such as Palo Alto, Fortinet or Cisco, including policy architecture and segmentation.
Practical cloud networking experience in Azure and/or AWS, including hybrid connectivity.
Network automation skills with Python and Ansible or Terraform.
CCNP Enterprise or CCNP Security, or an equivalent professional-level certification.
Strong written design documentation and the ability to explain trade-offs, cost and risk to technical and non-technical leaders.
Network Certifications such as CCNP, CCIE, CCDE or equivalent (Azure Network Engineer Associate, AWS Advanced Networking etc.).
Preferred qualifications
Experience with zero trust and SASE platforms such as Zscaler, Prisma Access or Netskope.
Experience with Kubernetes networking, service mesh or cloud load balancers.
Familiarity with ISO/IEC 27001, SOC 2 network controls and audit evidence.
Experience in an IT services or managed services company supporting multiple customer environments.
