Enterprise Architect - Network Infrastructure

• Certifications aren’t mandatory but the level is crucial, The below are examples that would be beneficial:
  • CCIE (Enterprise Infrastructure, Service Provider, or Data Center) -required, or clearly demonstrated equivalent expert-level skill.
  • JNCIE or equivalent Juniper expert-level certification -accepted as an alternative to CCIE where routing/switching depth is proven.
  • CCDE -strongly preferred as evidence of design-level (not just operational) expertise.
  • Arista ACE, PCNSE (Palo Alto), or hyperscaler networking specialty certifications (AWS Advanced Networking, Azure Network Engineer)

Depth in the specialist area above is mandatory. Experience in the following adjacent domains is a strong plus and will be valued in candidate evaluation, since it enables broader solution ownership across engagements.

• Cloud networking: native AWS/Azure/GCP networking, transit gateways, and hybrid connectivity (Direct Connect, ExpressRoute).
• Security architecture, particularly firewalls, zero trust network access, and SASE.
• Wireless architecture (CWNP-level expertise).
• Network automation/DevNet-style software engineering.
• Data center compute and virtualization exposure (VMware, OpenStack, OpenShift), given how tightly fabric design is now coupled to compute platforms.
• AI networking (InfiniBand/RoCE fabrics for GPU clusters), an increasingly relevant adjacent specialism.

• Leads technical delivery independently and is the de facto final word on routing/switching design decisions within an engagement.
• Comfortable being the deepest technical voice in the room, including with client-side CCIE-level engineers.
• Mentors other network engineers and architects, raising technical depth across the practice.
• Communicates complex routing/switching trade-offs clearly to both technical teams and infrastructure leadership.
• Remains calm and decisive during live cutover windows and critical incident escalations.

Enterprise Architect -Network (Routing & Switching)

Expert-Level Routing, Switching & Data Center Fabric Architecture

Practice Area

Enterprise Architecture - Network Infrastructure

Reports To

Manager, ES&A

Level

Enterprise Architect

Location

Remote / Client site as required

Travel

Up to 30% dependent on engagement portfolio

World Wide Technology is hiring an Enterprise Architect who is a genuine, expert-level authority on routing and switching -someone who can design, defend, and personally troubleshoot the most demanding campus, data center, and wide-area network architectures our clients run. This role is CCIE-calibre depth.

This is a technical leadership role: the successful candidate will own the technical delivery of network architecture engagements from design through cutover, act as the final escalation point for complex routing and switching problems, and be the standard the rest of the network practice is measured against.

While routing and switching mastery is non-negotiable, WWT engagements increasingly span adjacent domains - security, AI, cloud networking, automation - and experience in these areas is a genuine advantage for career growth within the practice.

• Own end-to-end technical delivery of network architecture engagements: design authority, low-level design production, implementation oversight, and cutover/migration leadership.
• Host and chair Architecture Review Board (ARB) and Technical Design Authority (TDA) sessions for network engagements, owning governance gates, decision records, and design sign-off.
• Architect enterprise-grade routing solutions spanning BGP (iBGP/eBGP, route reflection, complex policy), OSPF, IS-IS, and EIGRP for campus, data center, and WAN environments.
• Design and validate switching architectures: VLANs, STP/RSTP/MST, VXLAN/EVPN fabrics, VPC/MLAG, and SDN-based data center fabrics (Cisco ACI, Arista CloudVision, Juniper Apstra).
• Lead spine-leaf data center fabric design, including underlay/overlay architecture, multi-tenancy, and fabric automation.
• Architect WAN and SD-WAN solutions (Cisco Viptela/Meraki, VMware VeloCloud, Silver Peak, Fortinet) including MPLS integration and transport diversity strategies.
• Design QoS policies, multicast (PIM-SM/SSM), and IPv6 architectures for mission-critical environments.
• Integrate network segmentation and micro-segmentation designs with client security architecture, including zero trust network access initiatives.
• Lead client-facing technical design workshops, present architecture to network and infrastructure leadership, and act as the named technical escalation point for delivery teams.
• Mentor other network engineers and architects, and contribute to WWT's network architecture standards and reference designs.
• Support pre-sales through technical scoping, proof-of-concept design, and effort estimation for network engagements.

• 10+ years in network engineering and architecture roles, with demonstrable ownership of enterprise-scale routing and switching designs.
• Expert-level, CCIE-calibre technical depth is mandatory -CCIE (Enterprise Infrastructure, Service Provider, or Data Center) is required, or the candidate must demonstrate clearly equivalent expert-level skill through technical assessment.
• Track record leading technical delivery of multi-site or global network transformation programmes.

• BGP: iBGP and eBGP design, route reflection, confederations, complex routing policy, BGP-based multi-homing and traffic engineering.
• IGP: OSPF (multi-area design, LSA types, route summarization/filtering), IS-IS, and EIGRP where relevant to legacy environments.
• MPLS: L3VPN/L2VPN design, traffic engineering, and integration with WAN/SD-WAN overlays.
• IPv6: dual-stack and native IPv6 design and migration strategy.

• Layer 2 design: VLANs, STP/RSTP/MST tuning, loop prevention at scale.
• VXLAN/EVPN: overlay design, multi-tenancy, and interoperability across vendor fabrics.
• High availability: VPC/MLAG, stacking technologies, and fast-convergence design (BFD, sub-second failover).
• SDN fabrics: Cisco ACI, Arista CloudVision/EVPN-VXLAN, or Juniper Apstra -hands-on design and operations experience with at least one.

• Hands-on design experience with at least one major SD-WAN platform (Cisco Viptela/Meraki, VMware VeloCloud, Silver Peak, Fortinet, or equivalent).
• Multicast design and troubleshooting: PIM-SM/SSM, IGMP/MLD, rendezvous point design.
• QoS architecture across converged voice, video, and data environments.

• Experience integrating network segmentation and micro-segmentation with firewall and zero trust network architectures.
• Working knowledge of network access control (802.1X, TrustSec, or equivalent).

• Working proficiency in Python and Ansible for network automation and configuration management.
• Experience with model-driven programmability: NETCONF/YANG, RESTCONF.
• Familiarity with streaming telemetry and gNMI-based monitoring.

• Deep, hands-on expertise across Cisco and at least one of Juniper or Arista.
• Working familiarity with security/ADC platforms at the network boundary (Palo Alto, F5) sufficient to design integration points.

• Proven experience hosting and chairing formal Architecture Review Board (ARB) and Technical Design Authority (TDA) forums, including agenda ownership, decision logging, and stakeholder facilitation.
• Ability to define and operate governance gates across the engagement lifecycle: design authority sign-off, change control, and exception/waiver management for network architecture decisions.
• Experience producing and maintaining architecture decision records (ADRs), design standards, and reference architectures that are actively enforced through ARB/TDA governance.
• Comfortable presenting and defending architecture decisions to senior client governance bodies, including constructively challenging non-compliant or high-risk designs.

• Proven ability to author professional-services-grade high-level and low-level design (HLD/LLD) documentation.
• Experience leading technical design workshops directly with client network engineering teams and architecture review boards.