Network Architect

About us:

Intuitive.AI is one of the fastest-growing (INC 5000, CRN) Cloud & SDx solution and services companies supporting enterprise customers on a global scale. Intuitive is an "Engineering Company" delivering measurable value and key business outcomes.

Intuitive Superpowers:

• DataOps & AI/ML

• Cloud Native, AppSecOps, DevSecOps

• Cloud Migration & Transformation

• Cloud FinOps

• Cybersecurity (App/Data/Infra) & GRC

• SDx & Digital Workspace

We are proud to partner with some of the world's leading enterprises and serve 200+ customers across different industry verticals. We have achieved many milestones along the way, including being recognized as a top-10 fast-growth 150 IT company in the Americas by CRN in 2022 and being named one of America's fastest-growing private companies by INC 5000 in 2022. That’s not all! Even CIO Review awarded us as the Most Promising Cloud Migration Company and Artificial Intelligence Solutions Provider in 2022.

About the job:

Title: Network Architect

Location: Remote across USA/ Canada

Position Type: Contract

Manager Note: This is NOT traditional hub-and-spoke TGW work. The new-world architecture at customer is Lattice-first. Candidates who only know TGW/PrivateLink but haven't touched Lattice Resources (the Dec 2024 GA features — Resource Gateway, Resource Configs, service network VPC endpoints) will struggle. The CDK/automation requirement is real — they want to AI-harness these patterns for repetition

At least one of the below experience is required in addition to the above requirements:

• Strong VPC Lattice experience

• Network observability - Generate and collect cloud network metrics (latency, round-trip time etc.) for traffic flowing between on-premises data centers and AWS, as well as between cloud providers. Experience in creating those metrics in a centralized but consumable way by workloads

What we need SMEs in: VPC Lattice (Resource Configs, Resource Gateway, service networks, service network VPC endpoints for hybrid access), AWS CloudWAN (segments, route filtering, advanced routing, TGW peering), Direct Connect (VIF automation, VGW direct attachment, DX Gateway patterns, 100G dedicated circuits), Route 53 Resolver (inbound/outbound endpoints, conditional forwarding for on-prem DNS zones), IAM data perimeter design (replacing traditional firewall allow/deny with native AWS constructs), and CDK/Python/CFT (infrastructure-as-code for repeatable network provisioning patterns, Lambda-based lifecycle automation).

Customer network architecture basics:

• Cloud WAN ("CloudWAN segments") for global connectivity — FastTrack (prod), SkyPath (proxy), SkyTransit (hybrid), Workload segments

• Shared VPCs (legacy "FastTrack" model) with Customer-routable + cloud-routable CIDR — its being superseded by...

• Customer-Managed VPCs (new world) — individual per-workload VPCs connected via VPC Lattice service networks. All new migration work goes here.

• "On-Ramp" = DX connection points (Equinix Ashburn, CoreSite Reston, Equinix Slough/Manchester). Connected to CloudWAN.

• SkyPath = TLS proxy fleet for cross-zone/cross-segment traffic. InfoSec-mandated but Mike Ahern (key stakeholder) is actively trying to bypass it for migration flows.

• On-prem network is flat; firewall between on-prem and cloud is IP-based with specific port openings.