Network Architect (AWS)

Location: Hybrid, with the primary office in London and additional offices in Cambridge and Leeds, United Kingdom. Most people are expected to attend the office at least twice per month, depending on the role and team agreement.

Salary from: £89,000 per year.

Company

hirify.global enables genomic healthcare and research through national genomic services, research infrastructure and complex healthcare software systems.

What you will do

• Lead the architecture and design of secure, scalable, resilient and cost-effective network solutions across AWS, hybrid infrastructure, remote access and partner connectivity.
• Design AWS networking, including multi-account connectivity, VPCs, Transit Gateway, routing, segmentation, DNS, load balancing, private connectivity and network security controls.
• Architect resilient connectivity between AWS, hirify.global locations, NHS and government partners, research organisations, suppliers and other trusted environments.
• Embed zero-trust principles, least privilege, encryption in transit, secure remote access and boundary protection for sensitive genomic and associated health data.
• Develop network roadmaps and transition architectures, providing oversight from discovery and options analysis through implementation, migration and live service.
• Document architectures, traffic flows, risks, decisions and transition states; define requirements for observability, capacity management, resilience testing and incident response.

Requirements

• Substantial experience designing and delivering enterprise network architectures in complex, security-conscious environments.
• Strong knowledge of AWS networking, including VPCs, Transit Gateway, Direct Connect, VPN, Route 53, load balancing, private endpoints and network security controls.
• Experience with hybrid and multi-site connectivity, routing, switching, segmentation, firewalls, DNS, IP address management, load balancing and secure remote access.
• Detailed knowledge of physical network technologies, ideally Cisco, NVIDIA and Mellanox, including Cisco Nexus Dashboard, data centre fabrics, Aruba networking infrastructure, BGP, OSPF, RoCE v2, performance optimisation and lifecycle management.
• Experience architecting highly available and resilient networks with recovery objectives, diverse connectivity and tested failover arrangements; strong knowledge of network security architecture, zero trust, defence in depth and third-party connectivity.
• Experience designing networks for high-throughput, data-intensive or latency-sensitive workloads, diagnosing performance or capacity constraints, and supporting automation, infrastructure as code, configuration management and observability.
• Ability to translate business, security, operational and user needs into practical network designs, standards and delivery roadmaps while balancing strategy, delivery, legacy constraints and service continuity.
• Experience collaborating with architecture, infrastructure, cloud, engineering, security, procurement, commercial, service management and delivery stakeholders.
• Experience documenting and communicating network architectures, traffic flows, options, risks and decisions to technical and non-technical audiences, and providing architecture governance and assurance.
• Ability to improve network architecture practices, standards and controls and embed improvements into regular use.

Nice to have

• Relevant certification such as AWS Advanced Networking, AWS Solutions Architect, Cisco CCNP, Cisco CCIE or an equivalent qualification.
• Experience in healthcare, genomics, research, government or another regulated environment handling sensitive data, including network infrastructure procurement in a UK government organisation.
• Experience with software-defined networking, SD-WAN, secure access service edge, network access control, zero-trust network access, AWS Network Firewall, Cloud WAN, VPC Lattice or Gateway Load Balancer.
• Experience designing connectivity for high-performance compute, large-scale storage, data transfer appliances or distributed data-processing environments, including integrations with NHS, government, academic, research or commercial partner networks.
• Knowledge of network telemetry and tooling, including flow logs, packet analysis, synthetic monitoring, performance analytics and security monitoring.
• Experience with DevOps, CI/CD, infrastructure as code, automation and policy as code for network services.
• Understanding of identity-aware networking, certificate services, encryption, proxies, web gateways and data-loss prevention controls.
• Experience with architecture governance forums, enterprise architecture tools such as Abacus, and TOGAF or equivalent architecture practices.

Culture & Benefits

• Hybrid blended working with flexible team-designed working patterns and the option to apply for up to 30 days of remote working abroad annually, subject to approval.
• 30 days of annual leave plus bank holidays and additional long-service leave.
• Defined-contribution pension with employer double matching up to 10%, life assurance, electric vehicle salary sacrifice and Give As You Earn scheme.
• Learning budgets, training and certification support, and reimbursement for one annual professional subscription.
• Enhanced family leave, subsidised gym membership, Headspace, Employee Assistance Programme, eye tests and flu jabs.
• Inclusive workplace with reasonable adjustments available throughout the recruitment process.

Hiring process

• Successful candidates are subject to a Standard Disclosure and Barring Service check.
• Applicants must disclose previous offences at the point of application; some unspent convictions may affect progression because of the healthcare context.