Cloud Network Architect

WHO WE ARE:
Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai.

About the role:
The Cloud Network Architect is a strategic, customer-facing technical role responsible for ensuring the success of enterprise customers operating Aviatrix in production environments. As the primary technical point of contact, the Cloud Network Architect Trusted Advisor partners closely with customers to understand their architecture, guide best practices, and drive long-term platform adoption and health. This is not a sales role and focuses on customer outcomes and operational excellence.

Position Responsibilities:
Customer Engagement & Technical Ownership

• Serve as the dedicated Trusted Advisor for assigned strategic enterprise customers, acting as an extension of their cloud networking team.
• Own the end-to-end technical relationship including architecture design, deployment oversight, change management, and operational reviews.
• Lead regular business and technical reviews (QBRs/TBRs) with customer stakeholders, from network engineers to C-level executives.
• Proactively identify risks, gaps, and optimization opportunities within the customer's Aviatrix deployment.
• Drive customer adoption of Aviatrix platform capabilities, ensuring customers realize full value from their investment.

Cloud Network Architecture & Design

• Design and validate multi-cloud network architectures (AWS, Azure, GCP, OCI) leveraging the Aviatrix platform.
• Guide customers through transit network design, hub-and-spoke topologies, segmentation, and inter-cloud connectivity.
• Collaborate with customer teams on BGP, SD-WAN, MPLS, and hybrid connectivity designs.
• Document reference architectures and operational runbooks tailored to each customer's environment.
• Advise on cloud cost optimization strategies related to network topology and traffic flows.

Network Security & Aviatrix DCF

• Design and implement cloud network security architectures using Aviatrix Distributed Cloud Firewall (DCF).
• Define and enforce microsegmentation policies, security domains, and network-level access controls across multi-cloud environments.
• Architect and deploy DCF smart groups, security policies, and distributed stateful inspection to protect east-west and north-south traffic.
• Integrate Aviatrix DCF with third-party NGFW and security solutions (Palo Alto, Fortinet, Check Point) for unified security posture.
• Guide customers on Zero Trust Network Access (ZTNA) principles and implementation using Aviatrix security capabilities.
• Drive adoption of Aviatrix ThreatIQ, network threat detection, and security analytics within customer environments.
• Support security compliance initiatives (SOC 2, FedRAMP, HIPAA, PCI-DSS) through proper network security policy design.
• Collaborate with customer security operations teams to align Aviatrix DCF policies with organizational security standards and compliance requirements.

Operations & Incident Management

• Act as the technical escalation point for critical incidents within the customer's Aviatrix environment.
• Drive rapid resolution of network and security incidents, coordinating with Aviatrix TAC and Engineering as needed.
• Monitor platform health, perform proactive issue identification, and implement preventative measures.
• Develop and execute change management plans for major upgrades, migrations, and new feature deployments.

Collaboration & Thought Leadership

• Serve as the voice of the customer internally — relay feedback, feature requests, and product gaps to Product and Engineering teams.
• Contribute to internal knowledge base, runbooks, and best-practice documentation for the Embedded Engineering team.
• Mentor junior team members and share expertise on cloud networking and security architecture.
• Engage with Aviatrix field and product teams to stay current on roadmap, and proactively position new capabilities to customers.

Requirements

• 8+ years of experience in enterprise networking, cloud networking, or network security roles.
• Hands-on expertise with at least two major public clouds (AWS, Azure, GCP, or OCI) — including VPC/VNet design, transit gateways, and routing.
• Strong understanding of BGP, SD-WAN, MPLS, and hybrid cloud connectivity (Direct Connect, ExpressRoute, Cloud Interconnect).
• Experience with network security technologies: NGFWs, IDS/IPS, microsegmentation, Zero Trust, and cloud-native security controls.
• Hands-on experience with Aviatrix Distributed Cloud Firewall (DCF) — smart groups, security domains, stateful inspection, and policy enforcement — strongly preferred.
• Familiarity with cloud security compliance frameworks: SOC 2, FedRAMP, HIPAA, PCI-DSS, NIST CSF.
• Proficiency with automation and scripting (Python, Terraform, Ansible) for network provisioning and operations.
• Experience with monitoring and observability tools (CloudWatch, Azure Monitor, Splunk, Datadog) applied to network and security telemetry.

The US national annual base salary range for this full-time position is $138,235 - $162,629 + benefits + 401(k) match + equity and is bonus eligible. The pay range is determined by the role, work location, job-related skills, level, experience and relevant education. The range displayed is applicable only for new hires for the listed position located in the US. Your Talent Advisor can share more details regarding salary ranges, benefits, and equity for your location during the hiring process.

Benefits
US
: We cover 100% of employee premiums and 88% of dependent(s) premiums for medical, dental and vision coverage, 401(k) match, short and long-term disability, life/AD&D insurance, $1,000/year education reimbursement, and a flexible vacation policy.

Outside the US:
We offer a comprehensive benefits package which, (subject to regional variations) could include pension, private medical for you and dependents, generous holiday allowance, life assurance, long-term disability, annual wellbeing stipend

Your total compensation package will be based on job-related knowledge, education, certifications and location, per our aligned ranges.

About Aviatrix
Aviatrix®
is the cloud network security company trusted by more than 500 of the world’s leading enterprises. As cloud infrastructures become more complex and costly, the Aviatrix Cloud Network Security platform gives companies back the power, control, security, and simplicity they need to modernize their cloud strategies. Aviatrix is the only secure networking solution built specifically for the cloud, that ensures companies are ready for AI and what’s next. Combined with the Aviatrix Certified Engineer (ACE) Program, the industry’s leading secure multicloud networking certification, Aviatrix unifies cloud, networking, and security teams and unlocks greater potential across any cloud.

WE WANT TO INCLUDE YOU
We embrace the fact that not everyone’s journey took the same route or started at the same place. If your experience doesn’t quite meet the requirements but the opportunity excites you and you believe you could be great, don’t let that hold you back from applying. Tell us what you CAN bring and what makes you special.

Aviatrix is a community where everyone's career can grow and we want to help you achieve your goals and be “your best YOU,” however that looks. If you're seeking an opportunity where you can be excited to start work every morning with enthusiastic people, make a real difference and be part of something amazing then let’s talk. We want to get to know you and how we could grow together.

Aviatrix, Inc. is an equal opportunity employer and does not make hiring decisions based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

CPRA - California Applicant Privacy Notice