Theron Solutions
Solution Architect - Network Transformation
Job Description: Lead solutioning and delivery architecture for large?scale network modernization programs across WAN/LAN/WLAN and cloud networking. Own end?to?end designs for SD?WAN to SASE/Zero?Trust transitions, Network?as?a?Service (NaaS) models, multi?cloud connectivity patterns, and observability/automation, aligning to business outcomes, security, and experience (SLA/XLA). Roles and Responsibilities
Own discovery, assessment and target?state reference architectures for enterprise networks (WAN/LAN/WLAN, DC/Cloud, OT/edge). Design and document HLD/LLD for SD?WAN platforms and SASE/Zero?Trust controls (SWG, CASB, ZTNA, FWaaS). Define multi?cloud networking patterns (AWS TGW/Transit, Azure vWAN/Route Server, GCP NCC) and hybrid connectivity (ExpressRoute/Direct Connect/Interconnect). Shape LAN/WLAN modernization (intent?based/SD?Access, Wi?Fi 6/6E/7) and campus segmentation with identity?aware policies. Lead PoCs and solution validation; create BOMs/BOQs, migration runbooks, fallback plans, test/UAT approaches and acceptance criteria. Partner with OEMs and Telcos; evaluate NaaS constructs and commercials; contribute to make?vs?buy decisions. Embed observability and AIOps; specify telemetry, synthetics, and experience metrics (e.g., XLA) and define SLOs/SLIs. Industrialize network automation (Ansible/Terraform, pipelines, IaC/GitOps), golden configs and compliance guardrails. Contribute to pursuits (RFI/RFP/Orals), solution narratives, effort/cost models and risk registers; ensure solution governance and sign?offs. Provide architecture oversight into delivery; guide transition, cutovers, hypercare and handover; coach architects/engineers. Author reusable patterns/accelerators and knowledge assets for the practice; evangelize client frameworks and best practices. Qualifications
Mandatory Skills Experience: 1218+ years in networking with 6+ years as an architect delivering global programs (>200 sites or equivalent scale). Proven track record leading assessments, roadmaps, designs and migrations for SD?WAN/SASE and campus/DC modernization. Experience in multi?vendor, multi?supplier environments; comfortable with Guardian/Service Integration models. Consulting orientation with strong client?facing communication, storytelling and executive presentation skills. Education & Certifications: One or more vendor/industry certifications: CCNP/CCIE, JNCIP/JNCIE, PCNSE, Fortinet NSE 7/8, ZIA/ZCCP, AWS Advanced Networking Specialty, Microsoft Azure Network Engineer Associate, TOGAF/ITIL (preferred). Technical Skills: Deep architecture expertise in two or more SD?WAN stacks (e.g., Cisco Viptela/Meraki, Aruba EdgeConnect, Versa, Fortinet, Palo Alto/Prisma, Juniper). Hands?on design of SASE components (SWG, CASB/DLP, ZTNA, FWaaS) with vendors such as Zscaler, Netskope, Palo Alto, Fortinet, Cisco, or Cloudflare. Cloud networking across AWS/Azure/GCP (Transit/Hub?and?Spoke, vWAN, Route Server, TGW, NCC), DNS/DHCP/IPAM (e.g., Infoblox) and identity?aware segmentation. Campus & DC networking (EVPN/VXLAN, SDA/ACI or equivalent), Wireless (Wi?Fi 6/6E/7), NAC/802.1X. Automation and IaC (Ansible, Terraform, Git, CI/CD) and scripting (Python/Bash) to codify design, config and operational workflows. Observability & Digital Experience Monitoring (e.g., ThousandEyes, AppNeta, Datadog, Dynatrace) and NPM/NPMD stacks; capacity and performance engineering. Security fundamentals: Zero?Trust architectures, micro/macro?segmentation, certificate/PKI, encryption, BCP/DR for networks. Understanding of OT/Industrial networks and Private 5G/LTE (nice?to?have) for shop?floor and edge scenarios. Desired Skills
Customer focus and ownership mindset; ability to balance value, risk and cost. Collaborative leadership across architecture, engineering, security and operations. Structured problem?solving; crisp writing; ability to create compelling solution narratives. Success Measures / KPIs
Solution quality and governance (architecture checkpoints passed, deployment exceptions). Pursuit impact (win rate/shortlists, solution scoring, commercial hygiene). Migration outcomes (cutover success rate, MTTR, performance uplift, XLA improvements). Automation and standardization (golden configs/templates; % infra as code). EOE:
Our client is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: We are committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at our client are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. We will not tolerate discrimination or harassment based on any of these characteristics Seniority level
Mid-Senior level Employment type
Full-time Job function
Consulting Industries Business Consulting and Services
#J-18808-Ljbffr
Job Description: Lead solutioning and delivery architecture for large?scale network modernization programs across WAN/LAN/WLAN and cloud networking. Own end?to?end designs for SD?WAN to SASE/Zero?Trust transitions, Network?as?a?Service (NaaS) models, multi?cloud connectivity patterns, and observability/automation, aligning to business outcomes, security, and experience (SLA/XLA). Roles and Responsibilities
Own discovery, assessment and target?state reference architectures for enterprise networks (WAN/LAN/WLAN, DC/Cloud, OT/edge). Design and document HLD/LLD for SD?WAN platforms and SASE/Zero?Trust controls (SWG, CASB, ZTNA, FWaaS). Define multi?cloud networking patterns (AWS TGW/Transit, Azure vWAN/Route Server, GCP NCC) and hybrid connectivity (ExpressRoute/Direct Connect/Interconnect). Shape LAN/WLAN modernization (intent?based/SD?Access, Wi?Fi 6/6E/7) and campus segmentation with identity?aware policies. Lead PoCs and solution validation; create BOMs/BOQs, migration runbooks, fallback plans, test/UAT approaches and acceptance criteria. Partner with OEMs and Telcos; evaluate NaaS constructs and commercials; contribute to make?vs?buy decisions. Embed observability and AIOps; specify telemetry, synthetics, and experience metrics (e.g., XLA) and define SLOs/SLIs. Industrialize network automation (Ansible/Terraform, pipelines, IaC/GitOps), golden configs and compliance guardrails. Contribute to pursuits (RFI/RFP/Orals), solution narratives, effort/cost models and risk registers; ensure solution governance and sign?offs. Provide architecture oversight into delivery; guide transition, cutovers, hypercare and handover; coach architects/engineers. Author reusable patterns/accelerators and knowledge assets for the practice; evangelize client frameworks and best practices. Qualifications
Mandatory Skills Experience: 1218+ years in networking with 6+ years as an architect delivering global programs (>200 sites or equivalent scale). Proven track record leading assessments, roadmaps, designs and migrations for SD?WAN/SASE and campus/DC modernization. Experience in multi?vendor, multi?supplier environments; comfortable with Guardian/Service Integration models. Consulting orientation with strong client?facing communication, storytelling and executive presentation skills. Education & Certifications: One or more vendor/industry certifications: CCNP/CCIE, JNCIP/JNCIE, PCNSE, Fortinet NSE 7/8, ZIA/ZCCP, AWS Advanced Networking Specialty, Microsoft Azure Network Engineer Associate, TOGAF/ITIL (preferred). Technical Skills: Deep architecture expertise in two or more SD?WAN stacks (e.g., Cisco Viptela/Meraki, Aruba EdgeConnect, Versa, Fortinet, Palo Alto/Prisma, Juniper). Hands?on design of SASE components (SWG, CASB/DLP, ZTNA, FWaaS) with vendors such as Zscaler, Netskope, Palo Alto, Fortinet, Cisco, or Cloudflare. Cloud networking across AWS/Azure/GCP (Transit/Hub?and?Spoke, vWAN, Route Server, TGW, NCC), DNS/DHCP/IPAM (e.g., Infoblox) and identity?aware segmentation. Campus & DC networking (EVPN/VXLAN, SDA/ACI or equivalent), Wireless (Wi?Fi 6/6E/7), NAC/802.1X. Automation and IaC (Ansible, Terraform, Git, CI/CD) and scripting (Python/Bash) to codify design, config and operational workflows. Observability & Digital Experience Monitoring (e.g., ThousandEyes, AppNeta, Datadog, Dynatrace) and NPM/NPMD stacks; capacity and performance engineering. Security fundamentals: Zero?Trust architectures, micro/macro?segmentation, certificate/PKI, encryption, BCP/DR for networks. Understanding of OT/Industrial networks and Private 5G/LTE (nice?to?have) for shop?floor and edge scenarios. Desired Skills
Customer focus and ownership mindset; ability to balance value, risk and cost. Collaborative leadership across architecture, engineering, security and operations. Structured problem?solving; crisp writing; ability to create compelling solution narratives. Success Measures / KPIs
Solution quality and governance (architecture checkpoints passed, deployment exceptions). Pursuit impact (win rate/shortlists, solution scoring, commercial hygiene). Migration outcomes (cutover success rate, MTTR, performance uplift, XLA improvements). Automation and standardization (golden configs/templates; % infra as code). EOE:
Our client is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: We are committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at our client are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. We will not tolerate discrimination or harassment based on any of these characteristics Seniority level
Mid-Senior level Employment type
Full-time Job function
Consulting Industries Business Consulting and Services
#J-18808-Ljbffr