Infrastructure Architect

• Own and evolve the Enterprise Infrastructure Architecture (EIA) framework across on-premises, co-location, and hybrid environments.
• Serve as Design Authority for all major infrastructure initiatives chairing Architecture Review Boards (ARB) and Technical Design Authority (TDA) forums.
• Produce and maintain authoritative architecture artefacts: reference architecture, HLDs, LLDs, standards documents, and technology roadmaps.
• Engage directly with C-suite and senior business stakeholders to translate business requirements into infrastructure strategy.
• Define technology lifecycle management strategies: refresh cycles, decommission plans, and vendor roadmap alignment.

Data Centre Architecture & Operations

• Lead the design and governance of enterprise-grade on-premises data centres, including Tier III/IV facilities, Co-location, and private data halls.
• Architect compute platforms: bare-metal servers, rack design, blade systems, and high-density configurations.
• Define storage architecture: SAN (Fibre Channel, iSCSI), NAS, object storage (e.g. NetApp, Pure Storage, Dell EMC, HPE Nimble).
• Integrate infrastructure pipelines with enterprise CMDB (ServiceNow) for automated asset registration and compliance reporting.
• Oversee power and cooling architecture: UPS systems, PDUs, hot/cold aisle containment, DCIM tooling, and PUE optimization.
• Design and govern hypervisor and virtualization platforms: VMware vSphere/vSAN/NSX, Microsoft Hyper-V, and KVM environments.
• Lead data centre migration, consolidation, and modernization programs from planning through cutover and Hypercare.
• Define backup, replication, and disaster recovery architectures: RTO/RPO targets, DR site design, and regular DR testing governance

Enterprise Networking Architecture

• Architect and own the enterprise WAN, LAN, and data centre fabric spanning campus, branch, and multi-site environments.
• Design and govern core/distribution/access layer switching architectures using vendors such as Cisco, Juniper, Arista, or HPE Aruba.
• Lead SD-WAN design and deployment programs, including overlay/underlay architecture, traffic engineering, And policy frameworks.
• Architect MPLS, BGP, OSPF, IS-IS, and VRF-based routing for complex multi-site enterprise networks.
• Design secure network segmentation: VLANs, VXLANs, micro-segmentation, and macro-segmentation strategies.
• Define and govern enterprise firewall and perimeter security architecture (Palo Alto, Fortinet, Check Point, Cisco ASA/FTD).
• Oversee load balancing architecture (F5, Citrix Client / NetScaler, HAProxy) across data centre and Application tiers.
• Lead network performance management: QoS frameworks, traffic shaping, capacity modelling, and link aggregation.
• Define Out-of-Band (OOB) management network architecture and remote hands procedures.

Security Architecture & Compliance

• Embed Zero Trust Network Architecture (ZTNA) principles across on-premises and hybrid environments.
• Define IAM and PAM architecture: Active Directory, LDAP, RADIUS, TACACS+, CyberArk, or equivalent.
• Govern infrastructure security posture: patch management, vulnerability scanning, hardening baselines (CIS, DISA STIG).
• Ensure compliance with regulatory frameworks relevant to the customer's industry (ISO 27001, SOC 2, NIST CSF, PCI-DSS, GDPR, HIPAA).
• Develop and maintain Business Continuity and Disaster Recovery (BC/DR) architecture and test programs.

Observability, ITSM & Operational Excellence

• Define observability and monitoring architecture: SNMP, NetFlow/sFlow, IPFIX, and tooling such as SolarWinds, Zabbix, PRTG, or Datadog.
• Establish ITSM and CMDB governance: ITIL-aligned change, incident, and problem management aligned to ServiceNow or equivalent platforms.
• Own infrastructure capacity planning: modelling future demand across compute, storage, and network resources.
• Define SLAs, SLOs, and operational KPIs; drive continuous service improvement programs.

• 12+ years in enterprise infrastructure, 4+ years as Architect or Principal
• Proven delivery of large on-premises data centre programmes
• Multi-site enterprise WAN/LAN design and ownership
• Design authority / ARB leadership experience
• Enterprise customer-facing or managed services background preferred
• Track record in regulated industries (FS, healthcare, public sector)
• Data Centre: VMware vSphere/NSX/vSAN, NetApp, Pure Storage, Dell EMC
• Networking: Cisco (CCIE-level knowledge), Juniper, Arista; BGP, OSPF, MPLS, SD-WAN
• Security: Palo Alto / Fortinet firewalls, CyberArk PAM, Zero Trust principles
• Storage & Backup: SAN/NAS, Veeam, Zerto, Commvault
• Monitoring: SolarWinds, PRTG, Zabbix, Datadog
• ITSM: ServiceNow, ITIL v4 governance

Required/Preferred Certifications:

• TOGAF 9 or 10 (Enterprise Architecture Essential)
• Cisco CCIE / CCNP Enterprise or Data Centre
• VMware VCP-DCV or VCIX
• ITIL v4 Managing Professional or Strategic Leader

Additional Desirable:

• CISSP or CISM (Security Architecture)
• Juniper JNCIE or Arista ACE (desirable)
• AWS / Azure Solutions Architect (hybrid environments), Amazon Web Services (AWS), BGP, Blade Servers, Business Development, CCIE - Cisco Certified Internetwork Expert, CCNP - Cisco Certified Network Professional, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Capacity Management, Capacity and Performance Management, Cisco Network Systems, Citrix Product Family, Collocation, Computer Architecture, Computer Security, Computer Systems, Customer Relations, Data Migration, Defense Information Systems Agency (DISA), Dell Computers, Disaster Recovery, EMC Storage, Enterprise Architecture, F5 Network Software, Fibre Channel, Firewalls, Government, HIPAA (Health Insurance Portability and Accountability Act), Hardware Virtualization, Hypervisors, ISO (International Organization for Standardization), IT Service Management (ITSM), ITIL (IT Infrastructure Library), Incident Management, JNCIE - Juniper Networks Certified Internet Expert, Juniper Networks Product Family, K Virtual Machine (KVM), LDAP (Lightweight Directory Access Protocol), Leadership, Load Balancing, Local Area Network (LAN), MPLS (Multi-Protocol Label Switching), Machine Tool, Maintain Compliance, Management Strategy, Microsoft Active Directory, Microsoft Hyper-V, Microsoft Windows Azure, NetApp Storage Systems, Netflow, Network Architecture/Engineering, Network Attached Storage (NAS), Network Design, Network Operations Center, Network Routing, Open Shortest Path First Protocol (OSPF), PCI-DSS, Performance Metrics, Process Improvement, Productivity Model, Program Planning, Public Health, QoS (Quality of Service), RADIUS (Remote Authentication Dial-In User Service), Registered Training Organisation (RTO), Regulatory Compliance, Replication and Remote Mirroring, Requirements Management, SNMP (Simple Network Management Protocol), Security Architecture, Security Patches, Service Level Agreement (SLA), ServiceNow, Storage Architecture, Storage Area Network (SAN), Switching Architecture, TACACS+ (Terminal Access Controller Access Control System Plus), TOGAF - The Open Group Architecture Framework, Technical Leadership, Technical Strategy, Technical/Engineering Design, Test Program, Testing, Traffic Shaping, U.S. National Institute of Standards and Technology (NIST), VLAN (Virtual Local Area Network), VMWare, VMWare Certified Professional (VCP), VMWare vSphere, Vendor/Supplier Planning, Vulnerability Scanners, Wide Area Network (WAN), iSCSI

Q1 has steadily grown into a Quality IT services and solutions organization with the average experience of our team being over 10 years. We have continuously met or exceeded client expectations by delivering professional services and project implementations on time and under budget to help clients truly recognize return on investment. Company Size: 500 to 999 employees Industry: Computer/IT Services