Network Architect

About the role

We are looking for a Network Architect to design, automate and govern a hybrid enterprise network spanning Azure, on‑premises VMware and multi‑vendor security platforms. The role is fully remote, allowing you to work from anywhere in Armenia while collaborating with our Azure, VMware and security architects.

Key responsibilities

• Design the core Azure networking layer – VNets, subnets, Application Gateway, WAF, Azure Firewall, NSGs and route tables.
• Architect DNS and NetBox IPAM integration, consolidating on‑prem and cloud address data.
• Create automation for multi‑vendor firewalls (PaloAlto, F5, Cloudflare) using IaC, handling commits and locks.
• Define VMware NSX‑T segments, distributed firewall policies and load‑balancing/NAT rules aligned with NetBox.
• Plan hybrid connectivity for Azure VMware Solution and ExpressRoute, ensuring consistent routing and security.
• Provide architectural governance for high‑impact network and firewall changes and support production validation.

Required profile

• Minimum 2 years of enterprise network architecture experience with Azure networking and security platforms.
• Hands‑on experience automating infrastructure with Terraform or OpenTofu.
• Strong understanding of DNS (split‑horizon) and IP address management tools such as NetBox.
• Familiarity with VMware NSX‑T segmentation and distributed firewall policy modeling.
• Experience designing hybrid on‑premises‑to‑cloud connectivity, especially using ExpressRoute.
• Ability to work within strict change‑control processes for high‑impact modifications.
• English proficiency at B2+ level.

Required skills

• Azure VNets, Application Gateway, WAF, Azure Firewall, NSGs, Route Tables
• PaloAlto, F5, Cloudflare firewall platforms
• Terraform / OpenTofu (Infrastructure as Code)
• NetBox IPAM
• DNS architecture (split‑horizon, internal/public)
• VMware NSX‑T networking and distributed firewall
• ExpressRoute and Azure VMware Solution

What we offer

• Fully remote work from any location in Armenia
• Opportunity to shape a complex hybrid network architecture
• Collaboration with senior architects across Azure, VMware and security domains