Cloud Network Architect

1 мес. назад

USASenior

cloud networkingarchitecture designdeployment oversightchange management

Customer-facing technical role accountable for ensuring success and operational excellence of enterprise customers using cloud networking solutions.

Обязанности

The Cloud Network Architect is a strategic, customer-facing technical role responsible for ensuring the success of enterprise customers operating in production environments. As the primary technical point of contact, the Cloud Network Architect Trusted Advisor partners closely with customers to understand their architecture, guide best practices, and drive long-term platform adoption and health. This is not a sales role and focuses on customer outcomes and operational excellence.
Customer Engagement & Technical Ownership
Serve as the dedicated Trusted Advisor for assigned strategic enterprise customers, acting as an extension of their cloud networking team.
Own the end-to-end technical relationship including architecture design, deployment oversight, change management, and operational reviews.
Lead regular business and technical reviews (QBRs/TBRs) with customer stakeholders, from network engineers to C-level executives.
Proactively identify risks, gaps, and optimization opportunities within the customer's deployment.
Drive customer adoption of platform capabilities, ensuring customers realize full value from their investment.
Cloud Network Architecture & Design
Design and validate multi-cloud network architectures (AWS, Azure, GCP, OCI) leveraging the platform.
Guide customers through transit network design, hub-and-spoke topologies, segmentation, and inter-cloud connectivity.
Collaborate with customer teams on BGP, SD-WAN, MPLS, and hybrid connectivity designs.
Document reference architectures and operational runbooks tailored to each customer's environment.
Advise on cloud cost optimization strategies related to network topology and traffic flows.
Network Security & DCF
Design and implement cloud network security architectures using Distributed Cloud Firewall (DCF).
Define and enforce microsegmentation policies, security domains, and network-level access controls across multi-cloud environments.
Architect and deploy DCF smart groups, security policies, and distributed stateful inspection to protect east-west and north-south traffic.
Integrate DCF with third-party NGFW and security solutions (Palo Alto, Fortinet, Check Point) for unified security posture.
Guide customers on Zero Trust Network Access (ZTNA) principles and implementation using security capabilities.
Drive adoption of ThreatIQ, network threat detection, and security analytics within customer environments.
Support security compliance initiatives (SOC 2, FedRAMP, HIPAA, PCI-DSS) through proper network security policy design.
Collaborate with customer security operations teams to align DCF policies with organizational security standards and compliance requirements.
Operations & Incident Management
Act as the technical escalation point for critical incidents within the customer's environment.
Drive rapid resolution of network and security incidents, coordinating with TAC and Engineering as needed.
Monitor platform health, perform proactive issue identification, and implement preventative measures.
Develop and execute change management plans for major upgrades, migrations, and new feature deployments.
Collaboration & Thought Leadership
Serve as the voice of the customer internally — relay feedback, feature requests, and product gaps to Product and Engineering teams.
Contribute to internal knowledge base, runbooks, and best-practice documentation for the Embedded Engineering team.
Mentor junior team members and share expertise on cloud networking and security architecture.
Engage with field and product teams to stay current on roadmap, and proactively position new capabilities to customers.

Требования

8+ years of experience in enterprise networking, cloud networking, or network security roles.
Hands-on expertise with at least two major public clouds (AWS, Azure, GCP, or OCI) — including VPC/VNet design, transit gateways, and routing.
Strong understanding of BGP, SD-WAN, MPLS, and hybrid cloud connectivity (Direct Connect, ExpressRoute, Cloud Interconnect).
Experience with network security technologies: NGFWs, IDS/IPS, microsegmentation, Zero Trust, and cloud-native security controls.
Hands-on experience with Distributed Cloud Firewall (DCF) — smart groups, security domains, stateful inspection, and policy enforcement — strongly preferred.
Familiarity with cloud security compliance frameworks: SOC 2, FedRAMP, HIPAA, PCI-DSS, NIST CSF.
Proficiency with automation and scripting (Python, Terraform, Ansible) for network provisioning and operations.
Experience with monitoring and observability tools (CloudWatch, Azure Monitor, Splunk, Datadog) applied to network and security telemetry.
 
The US annual base salary range for this full-time position is $138,235 - $162,629 + benefits + 401(k) match + equity and is bonus eligible. The pay range is determined by the role, work location, job-related skills, level, experience and relevant education.  The range displayed is applicable only for new hires for the listed position located in the US. Your Talent Advisor can share more details regarding salary ranges, benefits, and equity for your location during the hiring process.
#LI-RACHEL #LI-Remote
BENEFITS
US : We cover 100% of employee premiums and 88% of dependent(s) premiums for medical, dental and vision coverage, 401(k) match, short and long-term disability, life/AD&D insurance, $1,000/year education reimbursement, and a flexible vacation policy. 
Outside the US: We offer a comprehensive benefits package which, (subject to regional variations) could include pension, private medical for you and dependents, generous holiday allowance, life assurance, long-term disability, annual wellbeing stipend
Your total compensation package will be based on job-related knowledge, education, certifications and location, per our aligned ranges.
About ®  is the cloud network security company trusted by more than 500 of the world’s leading enterprises. As cloud infrastructures become more complex and costly, the Cloud Network Security platform gives companies back the power, control, security, and simplicity they need to modernize their cloud strategies. is the only secure networking solution built specifically for the cloud, that ensures companies are ready for AI and what’s next. Combined with the  Certified Engineer (ACE) Program , the industry’s leading secure multicloud networking certification, unifies cloud, networking, and security teams and unlocks greater potential across any cloud.

Другое

WHO WE ARE:  
® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit .ai . 
We embrace the fact that not everyone’s journey took the same route or started at the same place. If your experience doesn’t quite meet the requirements but the opportunity excites you and you believe you could be great, don’t let that hold you back from applying. Tell us what you CAN bring and what makes you special.
is a community where everyone's career can grow and we want to help you achieve your goals and be “your best YOU,” however that looks. If you're seeking an opportunity where you can be excited to start work every morning with enthusiastic people, make a real difference and be part of something amazing then let’s talk. We want to get to know you and how we could grow together.
, Inc. is an equal opportunity employer and does not make hiring decisions based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
CPRA - California Applicant Privacy Notice