Network Architect

About the role

We are looking for a Network Architect who will design and govern our enterprise network across Azure, on‑premises VMware and multi‑vendor security platforms. The role is fully remote within Georgia, allowing work from home, our offices in Tbilisi or Batumi, or a coworking space in Kutaisi.

Key responsibilities

• Design the core Azure network foundation – VNets, subnets, Application Gateway, WAF, Azure Firewall, NSGs and route tables.
• Architect DNS and NetBox IPAM integration, consolidating on‑prem and Azure network data.
• Create multi‑vendor firewall automation for Palo Alto, F5 and Cloudflare, handling security rules, NAT, VIPs and certificates.
• Develop VMware NSX‑T segmentation, distributed firewall policies and load‑balancing/NAT configurations aligned with NetBox.
• Define hybrid connectivity for Azure VMware Solution and ExpressRoute, ensuring consistent routing and security.
• Contribute to roadmap‑driven capabilities such as global traffic management, SSE/ZTNA and BGP routing.
• Collaborate with Azure, VMware and Security architects to align network design with identity and secret management.
• Provide governance for high‑impact network and firewall changes and support production validation.

Required profile

• 2+ years of enterprise network architecture experience with Azure networking and security platforms.
• Hands‑on experience automating infrastructure as code using Terraform or OpenTofu.
• Understanding of split‑horizon DNS and IP address management tools like NetBox.
• Familiarity with VMware NSX‑T segmentation and distributed firewall policy modeling.
• Experience designing hybrid on‑premises‑to‑cloud connectivity, especially ExpressRoute patterns.
• Ability to work within strict change‑control processes for high‑impact network modifications.
• Proficiency in English at a B2+ level.

Required skills

• Azure VNets, Subnets, Application Gateway, WAF, Azure Firewall, NSGs, Route Tables
• DNS architecture (split‑horizon, internal/public)
• NetBox IPAM
• Palo Alto firewalls
• F5 load balancers
• Cloudflare security services
• Terraform / OpenTofu (IaC)
• VMware NSX‑T segmentation and distributed firewall
• ExpressRoute and Azure VMware Solution
• BGP routing concepts