Description

Lead the end-to-end architecture design and governance for migrating enterprise networks from Hub-and-Spoke to Azure Virtual WAN (VWAN).

This role is hybrid.

Responsibilities

• Define and execute the roadmap to decommission legacy Hub-and-Spoke architecture and fully transition to VWAN.
• Design application-centric migration strategies, ensuring complete application stacks (DMZ and internal dependencies) migrate together.
• Oversee transit firewall decommissioning to reduce routing complexity, latency, and operational overhead.
• Implement Web Application Firewall (WAF) compliance in Azure for all internet-facing applications and optimize UDR routing.
• Provide hands-on architectural support during migration execution, including troubleshooting, validation, and real-time decision-making.

Required Skills

• 5+ years of experience in network architecture and cloud migration.
• Deep expertise in Microsoft Azure networking, specifically Virtual WAN (VWAN).
• Strong background in network security, including firewall policy redesign and WAF implementation.
• Experience with routing optimization, traffic flow analysis, and micro-segmentation within cloud environments.
• Ability to define migration patterns, including Re-IP strategies, domain migration, and cutover playbooks.
• Bachelor's degree in Computer Science, Engineering, or related field.
• Proven track record of at least 3 years in a senior architectural or lead role.

Preferred Skills

• Experience with shared database and cross-network dependency analysis to minimize latency.
• Ability to collaborate with Cloud, Security, and Infrastructure teams across EST and MST time zones.

Key Skills

Education

Bachelor's degree