Network Architect – Azure & VMware Hybrid Solutions

About the role

We are looking for a Network Architect to design, implement, and govern a hybrid network infrastructure that spans Azure, on‑premises VMware environments, and multi‑vendor security platforms. The role focuses on building a scalable, secure, and automated foundation for connectivity and network operations.

Key responsibilities

• Design the core Azure networking layer – VNets, subnets, Application Gateway, WAF, Azure Firewall, NSGs, and route tables – that underpins all automation modules.
• Architect DNS and NetBox IPAM integration, consolidating internal and public zones and creating a unified data model for prefixes, tenants, sites, and VRFs.
• Develop multi‑vendor firewall automation for Palo Alto, F5, and Cloudflare, handling security rules, NAT, VIP/pool configuration, WAF policies, and certificate binding with concurrency controls.
• Define VMware NSX‑T segments, T1 routers, distributed firewall policies, and load‑balancing/NAT rules while ensuring address consistency with NetBox.
• Design hybrid connectivity for Azure VMware Solution and ExpressRoute, maintaining consistent routing and security across on‑prem, VMware, and Azure.
• Collaborate with Azure, VMware, and Security architects to align network design with identity, certificate, and secret management.
• Provide governance for high‑impact network and firewall changes and support production validation.

Required profile

• Minimum 2 years of enterprise network architecture experience with Azure networking and security platforms.
• Hands‑on experience automating network infrastructure using Infrastructure as Code (Terraform/OpenTofu).
• Strong understanding of DNS architecture (split‑horizon) and IP address management tools such as NetBox.
• Familiarity with VMware NSX‑T segmentation and distributed firewall policy modeling.
• Experience designing hybrid on‑premises‑to‑cloud connectivity, especially ExpressRoute patterns.
• Ability to work within strict change‑control processes for high‑blast‑radius modifications.
• Proficiency in English (B2+ level).

Required skills

• Azure VNets, Application Gateway, WAF, Azure Firewall, NSGs, Route Tables
• DNS (internal and public authoritative)
• NetBox IPAM
• Palo Alto, F5, Cloudflare firewall platforms
• VMware NSX‑T
• Terraform / OpenTofu
• ExpressRoute, BGP routing
• Hybrid cloud networking concepts (AVS, SSE/ZTNA)