Job Description

The Network Solutions Architect is a senior technical role responsible for designing secure, resilient, scalable, and high-performing enterprise network solutions across Microsoft Azure, on-premises datacenters, branch offices, and hybrid environments. Working closely with business leaders, customers, cybersecurity teams, infrastructure teams, carriers, and technology vendors, this role translates business and technical requirements into target-state network architectures that support availability, security, performance, operational efficiency, and business continuity. The Network Solutions Architect owns the complete network design lifecycle, from requirements discovery and architecture definition through implementation oversight, validation, operational transition, and continuous improvement.

Responsibilities

Key Job Responsibilities:

• Lead the architecture and design of secure, resilient, scalable, and high-performing network solutions across Azure, on-premises data centers, branch offices, and hybrid environments.
• Conduct network discovery, current-state assessments, traffic-flow analysis, dependency mapping, capacity reviews, risk assessments, and connectivity readiness evaluations.
• Develop target-state network architectures, migration strategies, high-level designs, low-level designs, logical and physical diagrams, IP addressing plans, routing matrices, security-zone models, and implementation guidance.
• Design Azure network topologies using hub-and-spoke, Virtual WAN, VNet peering, Azure Firewall, Network Virtual Appliances, VPN Gateway, ExpressRoute, Private Link, DNS, load balancing, and application delivery services.
• Design and modernize enterprise LAN, WAN, WLAN, datacenter, branch, internet-edge, remote-access, and carrier connectivity solutions.
• Define routing, segmentation, traffic inspection, failover, redundancy, quality of service, private connectivity, and hybrid DNS strategies based on business and technical requirements.
• Provide technical leadership during implementation, migration, testing, cutover, stabilization, and transition of network solutions to operations.
• Review and validate network designs, configurations, routing policies, firewall architectures, implementation plans, and technical deliverables produced by internal teams and third parties.
• Identify network risks, dependencies, assumptions, constraints, capacity limitations, single points of failure, and technical debt, and define practical mitigation plans.
• Partner with cybersecurity teams to implement segmentation, Zero Trust connectivity, secure remote access, threat prevention, logging, private access, and least-privilege network controls.
• Partner with operations teams to ensure solutions include monitoring, alerting, baselines, documentation, support models, lifecycle management, capacity planning, and operational readiness.
• Develop bandwidth estimates, capacity models, bills of materials, carrier requirements, licensing assumptions, cost estimates, and optimization recommendations for proposed solutions.
• Present architecture recommendations, traffic flows, trade-offs, risks, implementation dependencies, and investment requirements to customers, business leaders, and technical governance forums.
• Coordinate with telecommunications carriers, cloud providers, security vendors, network manufacturers, and implementation partners to deliver integrated solutions.
• Contribute to reusable network patterns, reference architectures, technical standards, automation, testing practices, and continuous improvement initiatives.

Skills and Experience

What You’ll Bring

• 8+ years of experience in Network Engineering, Network Architecture, Cloud Networking, or a related field.

• Proven experience designing and implementing enterprise network solutions, including cloud and data center environments.

• Strong expertise in Azure networking, including VNets, NSGs, Azure Firewall, VPN Gateway, ExpressRoute, Virtual WAN, Private Link, and Azure DNS.

• Strong knowledge of LAN/WAN/WLAN, data center networking, routing, switching, TCP/IP, VLANs, firewalls, load balancing, and high availability.

• Experience with BGP, OSPF, VPN, hybrid connectivity, and resilient network architectures.

• Strong understanding of network security and Zero Trust principles, including segmentation, DMZs, secure remote access, and firewall architectures.

• Experience with modern networking technologies such as SD-WAN, SASE, or cloud networking.

• Experience with network automation and Infrastructure as Code, such as Terraform, Bicep, PowerShell, Azure CLI, or Python.

• Ability to lead network discovery, solution design, technical assessments, architecture reviews, and implementation planning.

• Ability to evaluate technologies, vendors, and architectural options and recommend solutions based on security, performance, scalability, reliability, and cost.

• Strong communication skills, with the ability to explain complex network solutions and technical trade-offs to technical and business stakeholders.

Nice to Have

• Microsoft Certified: Azure Network Engineer Associate.

• Microsoft Certified: Azure Solutions Architect Expert.

• Cisco CCNP, CCIE, CCDE, or equivalent networking certification.

• Fortinet, Palo Alto Networks, Aruba, or Juniper certification.

• Terraform Associate, ITIL, or equivalent certification.

• Experience with Azure Virtual WAN, ExpressRoute, SD-WAN, SASE, and multi-region network architectures.

Language Skills

• English B2+ required.

• Portuguese is highly desirable.

About Auxis

Auxis prioritizes employee growth and development to help you advance your career. Auxis’ culture empowers you to be your best in the interest of a common team goal. We are constantly striving to improve our culture and environment and have invested in tools to continue to have better visualization of the pulse of our organization.