I
Technology Architect
Infosys
- 🇩🇪 Germany
- On-site
- Senior
- 20 hours ago
- SD-WAN
- Zero Trust
- DNS
- AWS
- GCP
- Azure
- VPC
- Server-Sent Events
- Network Security
- WAF
- SIEM
- NIST
- ISO 27001
- QoS
- MPLS
- IaC
- Terraform
- Ansible
- Python
- CI/CD
- SNMP
- NAT
- Kubernetes
- Istio
- Cilium
- IoT
- Windows
- OSPF
- BGP
- DHCP
- PKI
- Git
- CIS Benchmarks
- Prometheus
- Grafana
- CCNP
- CCIE
- AI
- Agile
20 hours ago
Job Description
Role - Senior Technology Architect – Network ArchitectLocation – Germany, UK and Netherlands (Any location)
Unit – CIS (Cloud and Infrastructure)
Job Description
Role Overview
The Senior Technology Architect (STA) – Network owns the end‑to‑end network architecture across data center, campus, WAN/SD‑WAN, cloud, and edge environments. The role defines strategy, blueprints, and guardrails; leads complex transformations; and ensures the network platform deliversresilience, security (Zero Trust), performance, and cost efficiency. The STA partners with product, security, platform engineering, and operations to architect vendor‑agnostic, automation‑first designs that scale across global enterprises.
Key Responsibilities
1) Architecture & Strategy
- Define thenetwork target state (DC, Campus, WAN/SD‑WAN, Cloud Networking, Edge) with reference architectures, patterns, and standards.
- Createhigh‑level and low‑level designs (HLD/LLD), including L2/L3, routing, segmentation, DNS, IPAM, firewalling, service insertion, and observability.
- Establishmulti‑cloud network architectures (AWS/GCP/Azure) covering VPC/VNet design, Transit Gateways, Private Service Connect/Endpoint, Direct Connect/Interconnect, cross‑cloud connectivity, and service mesh integration.
- Leadmodernization from legacy to EVPN/VXLAN fabrics, intent‑based networking, Zero Trust segmentation, and SASE/SSE.
- ApplyZero Trust principles across identity-aware segmentation, micro/macro segmentation (e.g., SDN, NSX‑T, ACI, TGW/Cloud WAN firewalls), secure east‑west and north‑south flows.
- Definesecurity guardrails (FWaaS, NGFW, WAF, IDS/IPS, DDoS, DNS security), key management, and policy-as-code; integrate with SIEM/SOAR.
- Partner with the CISO and platform teams to align withNIST, CIS, ISO 27001, and regulatory standards (e.g., telco/public sector as applicable).
- Engineer forhigh availability (multi‑AZ/region, fast reroute, ECMP, anycast, graceful restart) anddeterministic performance for latency‑sensitive workloads (including telco and real‑time apps).
- Definetraffic engineering strategies (QoS/CoS, policy‑based routing, segment routing, MPLS/EVPN/VXLAN, SR‑MPLS/SRv6).
- DesignDR and failover topologies; conduct chaos/resilience testing and capacity planning.
- Driveautomation‑first delivery usingTerraform/Ansible/Python and network controllers/SDKs; embedpolicy‑as‑code and compliance checks into CI/CD.
- Implementobservability: streaming telemetry, NetFlow/IPFIX, SNMP, syslog, synthetic testing, path analytics, digital experience monitoring (DEM).
- Govern SRE practices:SLO/SLI/error budgets for network services; automatepre‑/post‑change validation and rollbacks.
- Architectcloud networking at scale: VPC/VNet design, routing domains, NAT, ingress/egress, hybrid connectivity (DX/Interconnect/VPN), service discovery, PrivateLink/PSC.
- IntegrateKubernetes networking (CNI, Ingress/Egress, service mesh like Istio/Cilium), and secure service‑to‑service communication.
- Supportedge/IoT networking patterns, SD‑Branch, and local breakout with unified policy.
- LeadSD‑WAN strategy and migration from MPLS to internet/5G underlay with application‑aware routing and performance SLAs.
- DefineSASE/SSE reference patterns (ZTNA, SWG, CASB, DNS security, FWaaS) aligned with identity and device posture.
- Advise executives onnetwork strategy, roadmap, TCO/ROI, and risk.
- ChairDesign Authority; review HLD/LLD, test plans, and change windows; ensuredesign compliance andnon‑functional requirements (NFRs) are met.
- Mentor architects/engineers; cultivate reusable patterns and accelerators.
Core Networking
- Expert inrouting & switching (OSPF, BGP, IS‑IS),EVPN/VXLAN,MPLS,QoS/CoS,multicast,NAT,DNS/DHCP/IPAM.
- Proven experience designingleaf‑spine data center fabrics, campus architectures, and global WANs.
- Deep knowledge ofsegmentation (macro/micro), NGFWs, IDS/IPS, DDoS, WAF, PKI,identity‑driven policy, andSASE/SSE platforms.
- Hands‑on with policy design acrosson‑prem and cloud; integration withSIEM/SOAR.
- Strong withAWS/GCP/Azure networking (VPC/VNet, TGW/Cloud WAN, PrivateLink/PSC, Route 53/Cloud DNS, load balancers).
- Familiar withKubernetes networking (CNIs like Calico/Cilium, NetworkPolicies, Ingress/Egress, service mesh).
- Proficient inTerraform, Ansible, Python, Git‑based workflows, CI/CD for network changes, compliance checks (e.g.,CIS Benchmarks).
- Observability withPrometheus/Grafana,App/Net Performance Monitoring, NetFlow/IPFIX, streaming telemetry.
- Understanding ofSR‑IOV, DPDK, SCTP, 5G core networking concepts, UPF placement, and deterministic low‑latency patterns.
- Experience withNEF/SEPP security considerations, MEC/edge, and interconnect with public cloud.
- 12+ years in networking with 5+ years inarchitecture leadership roles.
- Certifications (mix of vendor and cloud beneficial):CCNP/CCIE,AWS/Azure/GCP networking‑focused certs.
- Bachelor’s or Master’s in Computer Science, Engineering, or related discipline (or equivalent experience).
Infosys is a global leader in next-generation digital services and consulting. We enable clients in 50+ countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through the many next of their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.
Visitwww.infosys.com to see how Infosys can help your enterprise navigate your next.
All aspects of employment at Infosys are based on merit, competence, and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employerÂ
- Domain: Other Domain
- Role Designation description: Senior Technology Architect
Technology Architect · Infosys