Staff Cloud Network Architect

The Staff Cloud Network Architect is a strategic, customer-facing technical role responsible for ensuring the success of enterprise customers operating Aviatrix in production environments. As the primary technical point of contact, the Staff Cloud Network Architect partners closely with customers to understand their architecture, guide best practices, and drive long-term platform adoption and health. This is not a sales role and focuses on customer outcomes and operational excellence.

Key Responsibilities

• Serve as the dedicated technical point of contact for assigned enterprise customers, owning architecture design, deployment oversight, and operational excellence across their Aviatrix deployments.

• Design and validate multi-cloud network architectures (AWS, Azure, GCP, OCI) including transit networks, hub-and-spoke topologies, segmentation, and inter-cloud connectivity.

• Design and implement cloud network security architectures using Aviatrix Distributed Cloud Firewall, including microsegmentation policies, security domains, and Zero Trust network access controls.

• Lead quarterly business and technical reviews with customer stakeholders ranging from network engineers to C-level executives, identifying optimization opportunities and demonstrating platform value.

• Act as the technical escalation point for critical incidents, driving rapid resolution while coordinating with Aviatrix TAC and Engineering teams.

• Proactively identify risks, gaps, and adoption opportunities within customer environments, then drive implementation of solutions that unlock full platform value.

• Relay customer feedback, feature requests, and product gaps to Aviatrix Product and Engineering teams, serving as the internal voice of the customer.

Requirements/Qualifications

• 8+ years of hands-on experience in enterprise networking, cloud networking, or network security roles within production environments.

• Demonstrated expertise with at least two major public clouds (AWS, Azure, GCP, or OCI), including VPC/VNet design, transit gateways, routing, and hybrid connectivity solutions.

• Strong foundation in BGP, SD-WAN, MPLS, and hybrid cloud connectivity technologies such as AWS Direct Connect, Azure ExpressRoute, or Google Cloud Interconnect.

• Hands-on experience designing and implementing network security architectures using NGFWs, IDS/IPS systems, microsegmentation, and Zero Trust network access principles.

• Proficiency with infrastructure automation and scripting using Python, Terraform, or Ansible for network provisioning and configuration management.

• Working knowledge of monitoring and observability tools such as CloudWatch, Azure Monitor, Splunk, or Datadog applied to network and security telemetry.

• Familiarity with cloud security compliance frameworks including SOC 2, FedRAMP, HIPAA, PCI-DSS, or NIST Cybersecurity Framework.

• Excellent communication and presentation skills, with the ability to translate technical concepts for audiences ranging from network engineers to executive stakeholders.

Nice to Have

• Hands-on experience with Aviatrix Distributed Cloud Firewall (DCF), including smart groups, security domains, stateful inspection, and policy enforcement.

• Prior experience in a customer success, solutions engineering, or technical advisory role for enterprise infrastructure or security platforms.

• Certifications in cloud platforms (AWS Solutions Architect, Azure Administrator) or security (CISSP, CEH) that demonstrate advanced networking and security expertise.

• Experience integrating and managing third-party network security solutions such as Palo Alto Networks, Fortinet, or Check Point within multi-cloud environments.

• Demonstrated expertise in designing and implementing SD-WAN or network segmentation solutions at scale within enterprise organizations.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.