Enterprise Network Architect – Infrastructure & DDI

Role Summary We are seeking an experienced Enterprise Network Architect to design and oversee the implementation of a secure, scalable, and regionally integrated network infrastructure across client offices. The candidate will lead architecture for LAN/WAN, SD-WAN, wireless, routing, switching, network access control, and DDI (DNS, DHCP, IPAM) solutions. This is a strategic role that combines deep technical expertise with hands-on design ownership. Key Responsibilities 1. Network Architecture & Design - Architect and document enterprise LAN/WAN infrastructure including: • Core and access switching (Cisco C9300/C9200) • WAN edge routing (Cisco C8300/C8200) • Layer 2/3 topology, VLANs, and IP segmentation - Design and implement SD-WAN architecture with multi-region integration (Americas, EMEA, APAC) - Define HA, redundancy, and failover strategies across routing, switching, and WAN links 2. Wireless and Access Infrastructure - Design and standardize Wi-Fi networks (Cisco Catalyst 9100, 9800 WLC) - Integrate identity-based VLAN assignment using Cisco ISE/NPS with 802.1X/EAP-TLS - Optimize wireless coverage, RF planning, and dynamic AP load balancing 3. DDI (DNS, DHCP, IPAM) - Architect and deploy Infoblox DDI solution (Grid Master/Members, HA) - Integrate DHCP and DNS services with IPAM, ISE, and Active Directory - Define IP address management schema, subnet design, and discovery policies 4. Security & Policy Integration - Collaborate with security teams on firewall integration and policy routing - Implement secure dynamic VLANs and posture-based access via Cisco ISE - Define network zoning, segmentation, and east-west traffic controls 5. Documentation & Standards - Produce high-quality HLDs, LLDs, implementation plans, and As-Built documentation - Establish configuration standards, naming conventions, and operational run books Requirements Required Qualifications - 15+ years of experience in enterprise network engineering/architecture - Deep hands-on expertise with: • Cisco enterprise routing and switching (Catalyst 9K series, IOS-XE) • Cisco WLCs (9800 series) and Wi-Fi 6 access points • Cisco ISE or Microsoft NPS for identity-based access • Infoblox or similar solution for DNS/DHCP/IPAM • BGP, OSPF, HSRP, VRRP, and Policy-Based Routing - Proven experience in designing multi-site, multi-region enterprise networks - Strong understanding of 802.1X, EAP-TLS, RADIUS, and certificate-based authentication - Experience with SD-WAN solutions (Cisco SD-WAN /Meraki/ Viptela preferred) Preferred Certifications - CCNP Enterprise or CCIE (Routing & Switching / Enterprise Infrastructure) - Infoblox Core DDI Certified (CDCA / CDIA) – preferred - Cisco Certified Specialist – Enterprise Wireless Design - Microsoft or Cisco security certifications a plus Soft Skills & Leadership - Strong documentation and presentation skills - Ability to lead design workshops and interface with global stakeholders - Proactive, structured, and capable of driving complex technical decisions