Network Solutions Architect

Are you an experienced network architect passionate about designing secure, resilient, scalable, and high-performing enterprise networks?
We are looking for a Network Solutions Architect to design and lead complex networking solutions across Microsoft Azure, enterprise datacenters, branch offices, and hybrid environments.
This senior technical role is responsible for translating business, application, security, and infrastructure requirements into practical network architectures that support availability, security, performance, business continuity, and operational efficiency. You will own the full solution lifecycle, from discovery and architecture design through implementation oversight, validation, operational transition, and continuous improvement.You will work closely with business leaders, customers, cybersecurity and infrastructure teams, telecommunications carriers, cloud providers, technology vendors, and implementation partners.
What You'll Do
Lead the architecture and design of secure, resilient, scalable, and high-performing network solutions across Azure, on-premises datacenters, branch offices, and hybrid environments.Conduct network discovery, current-state assessments, traffic-flow analysis, dependency mapping, capacity reviews, risk assessments, and connectivity readiness evaluations.Develop target-state architectures, migration strategies, high- and low-level designs, logical and physical diagrams, IP addressing plans, routing matrices, security-zone models, and implementation guidance.Design Azure network architectures using Virtual Networks, VNet Peering, Hub-and-Spoke, Virtual WAN, Azure Firewall, Network Virtual Appliances, VPN Gateway, ExpressRoute, Private Link, Azure DNS, Private DNS, Load Balancer, Application Gateway, WAF, Front Door, DDoS Protection, and Azure Bastion.Design and modernize enterprise LAN, WAN, WLAN, campus, datacenter, branch, internet-edge, remote-access, and carrier connectivity solutions.Define routing, segmentation, traffic inspection, failover, redundancy, Quality of Service, private connectivity, and hybrid DNS strategies based on business and technical requirements.Provide technical leadership during implementation, migration, testing, cutover, stabilization, and transition of network solutions to operations.Review and validate network designs, configurations, routing policies, firewall architectures, implementation plans, and technical deliverables from internal teams and third parties.Identify network risks, dependencies, assumptions, constraints, capacity limitations, single points of failure, and technical debt, defining practical mitigation plans.Partner with cybersecurity teams to implement network segmentation, Zero Trust connectivity, secure remote access, threat prevention, logging, private access, and least-privilege network controls.Partner with operations teams to ensure monitoring, alerting, performance baselines, documentation, support models, lifecycle management, capacity planning, and operational readiness.Develop bandwidth estimates, capacity models, bills of materials, carrier requirements, licensing assumptions, cost estimates, and optimization recommendations.Present architecture recommendations, traffic flows, technical trade-offs, risks, dependencies, and investment requirements to customers, business leaders, and technical governance forums.Coordinate with telecommunications carriers, cloud providers, security vendors, network manufacturers, and implementation partners to deliver integrated solutions.Contribute to reusable network patterns, reference architectures, technical standards, automation, testing practices, and continuous improvement initiatives.
What We're Looking For
Extensive experience in enterprise networking, network architecture, cloud networking, infrastructure engineering, or a related technology discipline.Strong experience designing and implementing production network solutions across Microsoft Azure, hybrid cloud, datacenter, branch, and enterprise environments.Deep knowledge of Azure networking, including VNets, subnets, VNet Peering, NSGs, ASGs, route tables, UDRs, Azure Firewall, VPN Gateway, ExpressRoute, Virtual WAN, Private Link, private endpoints, Azure DNS, and Private DNS Zones.Strong knowledge of Azure traffic delivery and edge services, including Load Balancer, Application Gateway, WAF, Front Door, Network Virtual Appliances, DDoS Protection, and Azure Bastion.Deep knowledge of enterprise LAN, WAN, WLAN, campus, branch, and datacenter networking, including IPv4/IPv6, subnetting, VLANs, trunks, spanning tree, link aggregation, routing, switching, NAT, ACLs, QoS, and high-availability protocols.Strong experience with BGP, OSPF, route propagation, path selection, asymmetric routing prevention, ExpressRoute, site-to-site VPN, point-to-site VPN, and resilient failover design.Strong understanding of network security, including segmentation, Zero Trust, security zones, DMZ architecture, firewalls, IDS/IPS, secure remote access, Network Access Control, egress control, and east-west/north-south traffic inspection.Knowledge of SD-WAN, SASE, SSE, overlay and underlay networking, application-aware routing, direct internet access, cloud on-ramps, and multi-transport branch connectivity.Strong understanding of DNS, DHCP, NTP, IP Address Management, hybrid name resolution, DNS forwarding, and private connectivity to Azure platform services.Experience with network automation and Infrastructure as Code using Terraform, Bicep, PowerShell, Azure CLI, Python, REST APIs, Git, or equivalent technologies.Experience with network monitoring and observability, including Azure Network Watcher, Connection Monitor, Log Analytics, flow logs, SNMP, Syslog, NetFlow/IPFIX, packet capture, performance baselines, and capacity analysis.Ability to design solutions based on reliability, security, performance efficiency, operational excellence, and cost optimization, applying Azure Well-Architected Framework principles.Ability to evaluate network technologies, carrier services, vendors, architectural patterns, technical trade-offs, and lifecycle risks.
Certifications
Preferred:Microsoft Certified: Azure Network Engineer AssociateMicrosoft Certified: Azure Solutions Architect ExpertCisco CCNP Enterprise, CCNP Security, or equivalentCisco CCIE Enterprise Infrastructure, CCDE, or equivalent expert-level certificationFortinet, Palo Alto Networks, Aruba, Juniper, or equivalent certificationsHashiCorp Terraform Associate, ITIL, or equivalent automation/service management certification
Experience with SD-WAN platforms, Azure Virtual WAN, ExpressRoute, SASE, Network Access Control, load balancers, and multi-region network architectures is highly valued.
What You Bring
Strong analytical thinking, structured troubleshooting, sound judgment, and attention to network risk and service impact.Ability to translate complex business, application, security, and infrastructure requirements into clear and supportable network architecture decisions.Excellent communication skills with technical and non-technical stakeholders.Ability to lead network discovery, architecture workshops, design reviews, implementation planning, and technical validation activities.Ability to balance security, availability, performance, latency, operational supportability, scalability, time, and cost.Technical mentorship skills and a commitment to establishing network standards and improving engineering consistency.Ownership, professionalism, integrity, and accountability throughout the network solution lifecycle.Ability to manage multiple complex initiatives, vendors, dependencies, and competing priorities.
Language RequirementsEnglish: Professional proficiency, minimum B2 level.Portuguese: Professional proficiency is highly desirable.