Lead Network Architect – Arista & Fortinet (Extranet / Security)

Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we are committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale. At New Era, you will join a team-oriented culture that prioritises your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service. If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together.

SUMMARY

We are looking for a highly skilled Arista Lead with deep expertise in Arista Networks and Fortinet Firewalls, to join our IT Infrastructure & Operations team. This senior leadership role is ideal for a professional with 7–10 years of enterprise networking experience who can architect, implement, and lead the migration from Cisco to Arista platforms, while supervising and mentoring a team of network engineers.

PRIMARY DUTIES

• Lead the design, implementation, and optimization of Arista-based network infrastructures and Fortinet NGFW & SD-WAN solutions.
• Architect Layer 2/3 topologies using Arista EOS, Cloud Vision, and spine-leaf architecture.
• Configure, manage, and fine-tune Fortinet firewalls, policies, and HA deployments.
• Supervise and mentor a team of network engineers, ensuring quality project delivery.
• Drive automation initiatives using Python, Ansible, and Fortinet APIs.
• Collaborate with cybersecurity, infrastructure, and cloud application teams to ensure secure and scalable solutions.
• Implement Zero Trust segmentation across Arista and Fortinet platforms.
• Design and govern secure extranet architectures using VRFs, VLANs, and VXLAN, ensuring strict network segmentation and adherence to zero-trust security principles.
• Lead end-to-end onboarding of external partners (banks, regulators, institutional clients), including connectivity design, secure access provisioning, and validation of MFA and RBAC controls.
• Manage network configurations through Arista CloudVision using configlets, Studios, and Change Control workflows, ensuring controlled, auditable, and risk-free production deployments.
• Implement and enforce security policies including ACLs, micro-segmentation, and VRF isolation, ensuring compliance with global regulatory frameworks such as GDPR, SEC, and FCA.
• Monitor extranet environments using streaming telemetry and Network Data Lake, proactively identifying anomalies, managing incidents, and performing root cause analysis.
• Automate extranet provisioning and lifecycle management using Ansible, Terraform, and REST APIs, improving deployment efficiency, scalability, and consistency.
• Troubleshoot complex network and security events using Forti Manager and Forti Analyzer.

COMPETENCY

• Expertise in BGP, OSPF, VXLAN, EVPN.
• Proficiency in Cisco IOS & NX-OS configuration and troubleshooting.
• Strong knowledge of FortiOS rule base management, threat mitigation, HA deployment.
• Automation with Python, Ansible, RESTful APIs.
• Hybrid cloud integration experience (Azure, AWS, GCP).
• Strong understanding of SDN architecture and micro-segmentation.

REQUIRED EDUCATION

• Mandatory: Arista Certified Engineering Expert (ACE Level 3+).
• Preferred: Cisco CCNP/CCIE or Juniper JNCIP/JNCIE.
• Bonus: Fortinet NSE Level 4 or higher.

EXPERIENCE

• 7–10 years in enterprise network engineering.
• Minimum 5 years of hands-on experience with Arista Networks.
• Minimum 5 years of senior-level experience with Fortinet Firewall technologies.
• Proven leadership/supervisory experience managing network engineers.

QUALIFICATIONS

• Strategic thinker with a security-first mindset.
• Strong leadership and mentoring abilities.
• Detail-oriented, adaptable, and able to thrive in dynamic enterprise environments.
• Passionate about innovation and network performance optimization.

WORK ENVIRONMENT

Onsite London England

TRAVEL

None

We never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at privacy@neweratech.com.