Note: The job is a remote job and is open to candidates in USA. Deloitte Global is the engine of the Deloitte network, delivering strategic programs and services that unite the organization. The Lead Specialist in Network Management will provide design leadership for the firm's global network and cloud connectivity strategy, shaping architectures and standards while partnering with global teams.
Responsibilities
- Provide design leadership for the firm's next-generation global network, security, and cloud connectivity strategy
- Shape target-state WAN, SASE, cloud exchange, automation, observability, and IP services architectures that enable secure, resilient, and scalable consumption of regional delivery centers, cloud platforms, and private cross-border communications
- Define architectural standards, influence technology roadmaps, guide engineering patterns, and partner across global teams to modernize legacy network designs into an agile, automated, policy-driven network-as-a-service capability
- Lead development of enterprise network architecture roadmaps, reference architectures, and design standards in partnership with global technology, cyber, cloud, and infrastructure stakeholders
- Architect a network-as-a-service (NaaS) delivery model that standardizes resilient, scalable, automated, and policy-based Global WAN capabilities
- Define high-level and low-level architecture patterns for WAN, MPLS, E-LAN, IPsec, SASE, cloud exchange, and hybrid connectivity services to support application migration into regional delivery hubs and cloud environments
- Establish infrastructure-as-code, automation, and orchestration patterns that improve design repeatability, governance, deployment consistency, and operational handoff
- Provide architectural direction for global data center exit and modernization initiatives as the firm transitions critical infrastructure and applications into centralized and cloud-enabled delivery models
- Design secure connectivity architectures into Global Cloud Platforms over private and Internet transports using strategic Cloud Exchange points of presence and consistent security controls
- Own IPv6 dual-stack architecture strategy and adoption patterns across the global network, aligning address planning, routing, security, and application migration considerations
- Shape the enterprise IP address management and regional LIR strategy across ARIN, RIPE, APNIC, LACNIC, and AFRINIC to support centralized governance, compliance, resiliency, and global scalability
- Contribute to the IT-of-the-future strategy by convening cross-functional architecture experts and advancing a global Center of Excellence for network modernization, standards, and reusable design patterns
- Define topology modeling, design documentation, and architecture visualization practices using platforms such as NetBrain to maintain authoritative views of current-state and target-state network architecture
- Define observability and network analytics architecture requirements that improve end-to-end visibility, service assurance, capacity planning, and proactive risk management
- Provide design authority and architectural governance for telecommunications integration, carrier connectivity, and production network activation patterns
Skills
- BS in Network Engineering, Computer Science, Information Systems, or equivalent enterprise architecture and engineering experience
- Demonstrated experience designing global enterprise network architectures, including WAN, routing, segmentation, cloud connectivity, and secure access patterns
- Strong understanding of network security architecture, zero trust principles, SASE, policy enforcement, and secure hybrid connectivity
- Experience influencing architecture decisions, standards, governance, and technology roadmaps in a large global enterprise environment
- Advanced routing architecture including BGP, OSPF, route policy, traffic engineering, segmentation, and resilient design patterns
- Cloud network architecture across AWS, Azure, and Google Cloud Platform, including private connectivity, transit, segmentation, security controls, and landing zone integration
- Architecture-led automation using scripting, APIs, infrastructure-as-code, CI/CD concepts, PowerShell, Python, Power Automate, and analytics platforms
- Network automation, SDN, orchestration, service catalog design, and network-as-a-service operating models
- Identity-aware network access and policy architecture, including Cisco ISE or equivalent network access control platforms
- Network modeling, topology visualization, architecture documentation, and design assurance using tools such as NetBrain
- Enterprise DDI, IPAM, DNS, DHCP, and public IP address governance using platforms such as Infoblox
- Familiarity with architecture governance, design review boards, standards management, and reusable infrastructure patterns
- Secure access service edge (SASE), zero trust network access, segmentation, and security service edge architecture concepts
- Telecommunications architecture, carrier integration, Internet and private transport strategy, and global connectivity design
Company Overview
Company H1B Sponsorship