Cloud Network Architect

WHO WE ARE:

The Cloud Network Architect is a strategic, customer-facing technical role responsible for ensuring the success of enterprise customers operating Aviatrix in production environments. As the primary technical point of contact, the Cloud Network Architect Trusted Advisor partners closely with customers to understand their architecture, guide best practices, and drive long-term platform adoption and health. This is not a sales role and focuses on customer outcomes and operational excellence.

Position Responsibilities:

Customer Engagement & Technical Ownership

• Serve as the dedicated Trusted Advisor for assigned strategic enterprise customers, acting as an extension of their cloud networking team.
• Own the end-to-end technical relationship including architecture design, deployment oversight, change management, and operational reviews.
• Lead regular business and technical reviews (QBRs/TBRs) with customer stakeholders, from network engineers to C-level executives.
• Proactively identify risks, gaps, and optimization opportunities within the customer's Aviatrix deployment.
• Drive customer adoption of Aviatrix platform capabilities, ensuring customers realize full value from their investment.

Cloud Network Architecture & Design

• Design and validate multi-cloud network architectures (AWS, Azure, GCP, OCI) leveraging the Aviatrix platform.
• Guide customers through transit network design, hub-and-spoke topologies, segmentation, and inter-cloud connectivity.
• Collaborate with customer teams on BGP, SD-WAN, MPLS, and hybrid connectivity designs.
• Document reference architectures and operational runbooks tailored to each customer's environment.
• Advise on cloud cost optimization strategies related to network topology and traffic flows.

Network Security & Aviatrix DCF

• Design and implement cloud network security architectures using Aviatrix Distributed Cloud Firewall (DCF).
• Define and enforce microsegmentation policies, security domains, and network-level access controls across multi-cloud environments.
• Architect and deploy DCF smart groups, security policies, and distributed stateful inspection to protect east-west and north-south traffic.
• Integrate Aviatrix DCF with third-party NGFW and security solutions (Palo Alto, Fortinet, Check Point) for unified security posture.
• Guide customers on Zero Trust Network Access (ZTNA) principles and implementation using Aviatrix security capabilities.
• Drive adoption of Aviatrix ThreatIQ, network threat detection, and security analytics within customer environments.
• Support security compliance initiatives (SOC 2, FedRAMP, HIPAA, PCI-DSS) through proper network security policy design.
• Collaborate with customer security operations teams to align Aviatrix DCF policies with organizational security standards and compliance requirements.

Operations & Incident Management

• Act as the technical escalation point for critical incidents within the customer's Aviatrix environment.
• Drive rapid resolution of network and security incidents, coordinating with Aviatrix TAC and Engineering as needed.
• Monitor platform health, perform proactive issue identification, and implement preventative measures.
• Develop and execute change management plans for major upgrades, migrations, and new feature deployments.

Collaboration & Thought Leadership

• Serve as the voice of the customer internally — relay feedback, feature requests, and product gaps to Product and Engineering teams.
• Contribute to internal knowledge base, runbooks, and best-practice documentation for the Embedded Engineering team.
• Mentor junior team members and share expertise on cloud networking and security architecture.
• Engage with Aviatrix field and product teams to stay current on roadmap, and proactively position new capabilities to customers.

Requirements

• 8+ years of experience in enterprise networking, cloud networking, or network security roles.
• Hands-on expertise with at least two major public clouds (AWS, Azure, GCP, or OCI) — including VPC/VNet design, transit gateways, and routing.
• Strong understanding of BGP, SD-WAN, MPLS, and hybrid cloud connectivity (Direct Connect, ExpressRoute, Cloud Interconnect).
• Experience with network security technologies: NGFWs, IDS/IPS, microsegmentation, Zero Trust, and cloud-native security controls.
• Hands-on experience with Aviatrix Distributed Cloud Firewall (DCF) — smart groups, security domains, stateful inspection, and policy enforcement — strongly preferred.
• Familiarity with cloud security compliance frameworks: SOC 2, FedRAMP, HIPAA, PCI-DSS, NIST CSF.
• Proficiency with automation and scripting (Python, Terraform, Ansible) for network provisioning and operations.
• Experience with monitoring and observability tools (CloudWatch, Azure Monitor, Splunk, Datadog) applied to network and security telemetry.

The US national annual base salary range for this full-time position is $138,235 - $162,629 + benefits + 401(k) match + equity and is bonus eligible. The pay range is determined by the role, work location, job-related skills, level, experience and relevant education. The range displayed is applicable only for new hires for the listed position located in the US. Your Talent Advisor can share more details regarding salary ranges, benefits, and equity for your location during the hiring process.

#LI-RACHEL #LI-Remote