Infrastructure Architect - Network Security and Cloud Solutions

Infrastructure Architect

Project Role : Infrastructure Architect
Project Role Description : Lead the definition, design and documentation of technical environments. Deploy solution architectures, conduct analysis of alternative architectures, create architectural standards, define processes to ensure conformance with standards, institute solution-testing criteria, define a solutions cost of ownership, and promote a clear and consistent business vision through technical architectures.
Must have skills : Network Security Implementation
Good to have skills : NA
Minimum 7.5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
The role is responsible for end-to-end architecture (SME), design, deployment, and lifecycle management of F5 BIG-IP (LTM/GTM), F5 Distributed Cloud (F5XC), and Infoblox DDI platforms across production, DR, and non-production environments. The position ensures high availability, scalability, security, and operational excellence for application delivery, DNS/DHCP, global traffic distribution, and Zero Trust/SASE-based services in on-prem, hybrid, and multi-cloud ecosystems.

Roles & Responsibilities:
Lead architecture and delivery of F5 BIG-IP, F5XC, and Infoblox DDI solutions across enterprise environments.
Design highly available, resilient load balancing, traffic management, and DNS/DHCP architectures for on-prem, hybrid, and multi-cloud (Azure/AWS) deployments.
Collaborate with application, network, and security stakeholders to enable secure traffic flows, global load distribution, and Zero Trust/SASE capabilities.
Configure and manage virtual servers, pools, monitors, SSL profiles, and iRules for advanced application delivery.
Design HA clusters, sync-failover groups, traffic groups, and geo-redundant DR architectures.
Implement GTM/DNS load balancing, topology-based routing, and intelligent failover strategies.
Develop and troubleshoot iRules/iApps for traffic steering, authentication, and security logic.
Perform platform upgrades, migrations (iSeries rSeries/VE), performance tuning, and capacity planning.
Deploy and onboard Customer Edge (CE) nodes across branch, cloud, and data center environments.
Implement WAAP, API protection, DNS Load Balancer, Secure Web Gateway, and DDoS mitigation services.
Configure L7 load balancing, routing policies, origin pools, IPsec/GRE tunnels, and segmentation controls.
Support Zero Trust/SASE use cases and troubleshoot L2/L3 connectivity and policy issues.
Design and deploy Infoblox Grids including Grid Master, Members, and HA configurations.
Manage DNS zones, views, conditional forwarders configure DHCP scopes and failover.
Implement IP address planning, subnet allocation, and automated provisioning through IPAM.
Troubleshoot DNS resolution, DHCP lease failures, and grid sync issues enable DNS security.
Implement SSL offloading/bridging with enterprise-grade client/server SSL profiles.
Manage certificate deployment, renewal, compliance, and lifecycle governance.
Integrate Venafi for automated certificate issuance and rotation maintain certificate inventory.
Automate provisioning and configuration using AS3, DO, FAST, Ansible, Terraform, and REST APIs.
Build IaC templates and CI/CD pipelines for consistent and rapid deployments.
Lead modernization, cloud migration, and consolidation initiatives.
Create HLD/LLD, SOPs, runbooks, and compliance-aligned documentation.
Provide mentoring, technical leadership, and knowledge transfer.
Provide L2/L3 support for incidents, problem management, and root cause analysis.
Perform proactive health checks, monitoring, upgrades, backups, and capacity planning.
Manage changes for new applications, traffic updates, and infrastructure enhancements to ensure SLAs.

Professional & Technical Skills:
F5 BIG-IP LTM, GTM/DNS, ASM/WAAP, iRules, iApps
F5 Distributed Cloud (F5XC) – WAAP, API Security, SWG, SASE, CE deployment
Infoblox DDI – DNS, DHCP, IPAM, Grid Architecture
SSL/TLS, Certificate Lifecycle Management, Venafi Integration
Multi-Cloud Networking (Azure/AWS), hybrid traffic architectures
AS3, DO, FAST
Ansible, Terraform
REST APIs
CI/CD pipelines
L2/L3 routing & switching
Load balancing concepts (L4–L7)
DNS/DHCP fundamentals
IPsec/GRE tunnels, segmentation, Zero Trust


Additional Information:
- The candidate should have minimum 7.5 years of experience in Network Security Implementation.
- This position is based at our Pune office.
- A 15 years full time education is required.