Enterprise Architect - Network Infrastructure in City of Westminster

Key Responsibilities

• Own end-to-end technical delivery of network architecture engagements: design authority, low-level design production, implementation oversight, and cutover/migration leadership.
• Host and chair Architecture Review Board (ARB) and Technical Design Authority (TDA) sessions, owning governance gates, decision records, and design sign‑off.
• Architect enterprise‑grade routing solutions spanning BGP (iBGP/eBGP, route reflection, complex policy), OSPF, IS‑IS, and EIGRP for campus, data center, and WAN environments.
• Design and validate switching architectures: VLANs, STP/RSTP/MST, VXLAN/EVPN fabrics, VPC/MLAG, and SDN‑based data center fabrics (Cisco ACI, Arista CloudVision, Juniper Apstra).
• Lead spine‑leaf data center fabric design, including underlay/overlay architecture, multi‑tenancy, and fabric automation.
• Architect WAN and SD‑WAN solutions (Cisco Viptela/Meraki, VMware VeloCloud, Silver Peak, Fortinet) including MPLS integration and transport diversity strategies.
• Design QoS policies, multicast (PIM‑SM/SSM), and IPv6 architectures for mission‑critical environments.
• Integrate network segmentation and micro‑segmentation designs with client security architecture, including zero trust network access initiatives.
• Lead client‑facing technical design workshops, present architecture to network and infrastructure leadership, and act as the named technical escalation point for delivery teams.
• Mentor other network engineers and architects, and contribute to WWT’s network architecture standards and reference designs.
• Support pre‑sales through technical scoping, proof‑of‑concept design, and effort estimation for network engagements.

Leadership & Delivery Expectations

• Leads technical delivery independently and is the final word on routing/switching design decisions within an engagement.
• Comfortable being the deepest technical voice in the room, including with client‑side CCIE‑level engineers.
• Mentors other network engineers and architects, raising technical depth across the practice.
• Communicates complex routing/switching trade‑offs clearly to both technical teams and infrastructure leadership.
• Remains calm and decisive during live cutover windows and critical incident escalations.

Technical Expertise

• Routing (Expert Level): BGP (iBGP/eBGP, route reflection, confederations, complex routing policy, BGP‑based multi‑homing and traffic engineering); OSPF (multi‑area design, LSA types, route summarization/filtering); IS‑IS; EIGRP where relevant; MPLS (L3VPN/L2VPN design, traffic engineering, and integration with WAN/SD‑WAN overlays); IPv6 (dual‑stack and native IPv6 design and migration strategy).
• Switching & Data Center Fabric (Expert Level): Layer 2 design (VLANs, STP/RSTP/MST tuning, loop prevention at scale); VXLAN/EVPN overlay design, multi‑tenancy, and interoperability across vendor fabrics; High availability (VPC/MLAG, stacking technologies, fast‑convergence design); SDN fabrics (Cisco ACI, Arista CloudVision/EVPN‑VXLAN, Juniper Apstra).
• WAN, SD‑WAN & Multicast: Hands‑on design experience with major SD‑WAN platforms (Cisco Viptela/Meraki, VMware VeloCloud, Silver Peak, Fortinet); Multicast design and troubleshooting (PIM‑SM/SSM, IGMP/MLD, rendezvous point design); QoS architecture across converged voice, video, and data environments.
• Security Integration: Integrating network segmentation and micro‑segmentation with firewall and zero trust network architectures; Working knowledge of network access control (802.1X, TrustSec, or equivalent).
• Automation & Programmability: Working proficiency in Python and Ansible for network automation; Experience with model‑driven programmability (NETCONF/YANG, RESTCONF); Familiarity with streaming telemetry and gNMI‑based monitoring.
• Multi‑Vendor Depth: Deep expertise across Cisco and at least one of Juniper or Arista; Familiarity with security/ADC platforms at the network boundary (Palo Alto, F5).

Governance & Documentation

• Proven experience hosting and chairing formal Architecture Review Board (ARB) and Technical Design Authority (TDA) forums, including agenda ownership, decision logging, and stakeholder facilitation.
• Define and operate governance gates across the engagement lifecycle: design authority sign‑off, change control, and exception/waiver management for network architecture decisions.
• Experience producing and maintaining architecture decision records (ADRs), design standards, and reference architectures that are actively enforced through ARB/TDA governance.
• Comfortable presenting and defending architecture decisions to senior client governance bodies.
• Proven ability to author professional‑services‑grade high‑level and low‑level design (HLD/LLD) documentation.

Qualifications

• 10+ years in network engineering and architecture roles with demonstrable ownership of enterprise‑scale routing and switching designs.
• Expert‑level, CCIE‑calibre technical depth is mandatory (CCIE Enterprise Infrastructure, Service Provider, or Data Center); or demonstrable equivalent expert‑level skill through technical assessment.
• Track record leading technical delivery of multi‑site or global network transformation programmes.
• Working familiarity with security/ADC platforms at the network boundary (Palo Alto, F5) sufficient to design integration points.
• Experience integrating network segmentation and micro‑segmentation with firewall and zero trust network architectures.
• Strong knowledge of automation and programmability tools and protocols.

Required Certifications

• CCIE (Enterprise Infrastructure, Service Provider, or Data Center) – required.
• JNCIE or equivalent Juniper expert‑level certification – accepted as an alternative.
• CCDE – strongly preferred.
• Arista ACE, PCNSE (Palo Alto), or hyperscaler networking specialty certifications (AWS Advanced Networking, Azure Network Engineer).

Additional Desired Adjacent Domain Experience

• Cloud networking (native AWS/Azure/GCP networking, transit gateways, hybrid connectivity).
• Security architecture (firewalls, zero trust, SASE).
• Wireless architecture (CWNP‑level expertise).
• Network automation/DevNet‑style software engineering.
• Data center compute and virtualization exposure (VMware, OpenStack, OpenShift).
• AI networking (InfiniBand/RoCE fabrics for GPU clusters).

About the Role

World Wide Technology is hiring an Enterprise Architect who is a genuine, expert‑level authority on routing and switching. This role is CCIE‑calibre depth and is a technical leadership position. The successful candidate will own the technical delivery of network architecture engagements from design through cutover, act as the final escalation point for complex routing and switching problems, and be the standard the rest of the network practice is measured against. While routing and switching mastery is non‑negotiable, WWT engagements increasingly span adjacent domains – security, AI, cloud networking, automation – and experience in these areas is a genuine advantage for career growth within the practice.