Cloud Network Architect

📋 Job Overview

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises.

🏢 About Aviatrix

Aviatrix is the cloud network security company trusted by more than 500 of the world’s leading enterprises. As cloud infrastructures become more complex and costly, the Aviatrix Cloud Network Security platform gives companies back the power, control, security, and simplicity they need to modernize their cloud strategies. Aviatrix is the only secure networking solution built specifically for the cloud, that ensures companies are ready for AI and what’s next. Combined with the Aviatrix Certified Engineer (ACE) Program, the industry’s leading secure multicloud networking certification, Aviatrix unifies cloud, networking, and security teams and unlocks greater potential across any cloud.

🎯 The Role

The Cloud Network Architect is a strategic, customer-facing technical role responsible for ensuring the success of enterprise customers operating Aviatrix in production environments. As the primary technical point of contact, the Cloud Network Architect Trusted Advisor partners closely with customers to understand their architecture, guide best practices, and drive long-term platform adoption and health. This is not a sales role and focuses on customer outcomes and operational excellence.

✅ Key Responsibilities

• Serve as the dedicated Trusted Advisor for assigned strategic enterprise customers, acting as an extension of their cloud networking team.
• Own the end-to-end technical relationship including architecture design, deployment oversight, change management, and operational reviews.
• Lead regular business and technical reviews (QBRs/TBRs) with customer stakeholders, from network engineers to C-level executives.
• Proactively identify risks, gaps, and optimization opportunities within the customer's Aviatrix deployment.
• Drive customer adoption of Aviatrix platform capabilities, ensuring customers realize full value from their investment.
• Design and validate multi-cloud network architectures (AWS, Azure, GCP, OCI) leveraging the Aviatrix platform.
• Guide customers through transit network design, hub-and-spoke topologies, segmentation, and inter-cloud connectivity.
• Collaborate with customer teams on BGP, SD-WAN, MPLS, and hybrid connectivity designs.
• Document reference architectures and operational runbooks tailored to each customer's environment.
• Advise on cloud cost optimization strategies related to network topology and traffic flows.
• Design and implement cloud network security architectures using Aviatrix Distributed Cloud Firewall (DCF).
• Define and enforce microsegmentation policies, security domains, and network-level access controls across multi-cloud environments.
• Architect and deploy DCF smart groups, security policies, and distributed stateful inspection to protect east-west and north-south traffic.
• Integrate Aviatrix DCF with third-party NGFW and security solutions for unified security posture.
• Guide customers on Zero Trust Network Access (ZTNA) principles and implementation using Aviatrix security capabilities.
• Drive adoption of Aviatrix ThreatIQ, network threat detection, and security analytics within customer environments.
• Support security compliance initiatives (SOC 2, FedRAMP, HIPAA, PCI-DSS) through proper network security policy design.
• Collaborate with customer security operations teams to align Aviatrix DCF policies with organizational security standards and compliance requirements.
• Act as the technical escalation point for critical incidents within the customer's Aviatrix environment.
• Drive rapid resolution of network and security incidents, coordinating with Aviatrix TAC and Engineering as needed.
• Monitor platform health, perform proactive issue identification, and implement preventative measures.
• Develop and execute change management plans for major upgrades, migrations, and new feature deployments.
• Serve as the voice of the customer internally — relay feedback, feature requests, and product gaps to Product and Engineering teams.
• Contribute to internal knowledge base, runbooks, and best-practice documentation for the Embedded Engineering team.
• Mentor junior team members and share expertise on cloud networking and security architecture.
• Engage with Aviatrix field and product teams to stay current on roadmap, and proactively position new capabilities to customers.

📌 Required Qualifications

• 8+ years of experience in enterprise networking, cloud networking, or network security roles.
• Hands-on expertise with at least two major public clouds (AWS, Azure, GCP, or OCI) — including VPC/VNet design, transit gateways, and routing.
• Strong understanding of BGP, SD-WAN, MPLS, and hybrid cloud connectivity (Direct Connect, ExpressRoute, Cloud Interconnect).
• Experience with network security technologies: NGFWs, IDS/IPS, microsegmentation, Zero Trust, and cloud-native security controls.
• Hands-on experience with Aviatrix Distributed Cloud Firewall (DCF) — smart groups, security domains, stateful inspection, and policy enforcement — strongly preferred.
• Familiarity with cloud security compliance frameworks: SOC 2, FedRAMP, HIPAA, PCI-DSS, NIST CSF.
• Proficiency with automation and scripting (Python, Terraform, Ansible) for network provisioning and operations.
• Experience with monitoring and observability tools (CloudWatch, Azure Monitor, Splunk, Datadog) applied to network and security telemetry.

🎁 Benefits

• The US national annual base salary range for this full-time position is $138,235 - $162,629 + benefits + 401(k) match + equity and is bonus eligible.
• US: We cover 100% of employee premiums and 88% of dependent(s) premiums for medical, dental and vision coverage, 401(k) match, short and long-term disability, life/AD&D insurance, $1,000/year education reimbursement, and a flexible vacation policy.
• Outside the US: We offer a comprehensive benefits package which, (subject to regional variations) could include pension, private medical for you and dependents, generous holiday allowance, life assurance, long-term disability, annual wellbeing stipend