Staff Network Architect, Cloud and Datacenter

About us

NinjaOne unifies IT to simplify work for nearly 40,000 customers in 140+ countries

The NinjaOne Unified IT Operations Platform delivers endpoint management, autonomous patching, backup, and remote access in a single console to improve efficiency, increase resilience, and reduce spend. By automating IT and managing all endpoints, organizations give employees a great technology experience at work.

NinjaOne is obsessed with customer success and has retained a 98% customer satisfaction score for more than 5 years.

About the Role

NinjaOne provides a unified IT management platform that simplifies IT operations, endpoint management, and security. We are looking for a Staff Network Architect, Cloud and Datacenter to own the enterprise network architecture across our Austin datacenter, AWS, and our production and corporate environments. You will design, build, and run the enterprise network behind our Austin datacenter and AWS environments, which support our QA, Development, and Sales teams, and set the network standards that other teams build on.

You will combine architectural vision with hands-on engineering

designing secure, scalable, highly available networks across datacenter and AWS, connecting them through hybrid and WAN architectures, and automating how they are deployed and operated. You will work closely with Datacenter Engineering, SRE, Platform Engineering, Infrastructure as Code and Build and Release, Security, QA, Development, and Sales. Expect roughly half your time on the Austin datacenter and half on cloud and platform work across the organization.

Must-have

hands-on AWS network architecture experience, including hybrid connectivity between AWS and a physical datacenter.

Location - We are flexible on remote working from home, if you are located in the USA and reside in one of the following states - CA, CO, CT, FL, GA, *IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, and WA. We have physical offices in Austin, TX and Tampa, FL, if you prefer a hybrid option. Candidates in the Austin area are preferred.

We hire the best software engineers, but experience in our stack can’t hurt: NinjaOne is built on Java, Kotlin, C++, Golang and Postgres; supporting millions of user endpoints and running as a scalable cloud service in AWS. Knowing large-scale datastore bottlenecks, asynchronous application design and client-server architecture will help you.

What You’ll be Doing

• Architecture and design: Own the network architecture for the Austin datacenter, AWS, and our production and corporate environments: design diagrams, IP addressing and CIDR/IPAM standards, routing designs, and design standards, and lead architecture reviews and vendor evaluations.
• Design and scale core network boundaries by establishing robust CIDR allocation strategies, IPAM (IP Address Management) frameworks, and non-overlapping subnets across all corporate domains.
• Cloud network design lead: As we move to infrastructure as code, serve as lead network designer for our cloud environments. Build and maintain a complete map of the network, from VPCs and front ends to subnets and CIDR blocks.
• VPN replacement: Define the strategy for replacing our VPN, covering both the Austin datacenter and all users accessing AWS, and run the project end to end.
• AWS networking: Design VPCs, Transit Gateway, Cloud WAN, and multi-account topologies; build hybrid connectivity with Direct Connect, site-to-site VPN, and BGP; secure it with Network Firewall, PrivateLink, and Route 53 Resolver.
• Datacenter networking: Design, deploy, and troubleshoot leaf-spine, VXLAN/EVPN, BGP, OSPF, VRF, and MLAG environments, and take part in cabinet builds, cabling validation, and network cutovers.
• Hybrid cloud: Build WAN and routing fabrics that connect on-premises, private cloud, and public cloud, with predictable failover paths.
• Security and resilience: Implement segmentation, firewall policy, and least-privilege connectivity with Security; support IPv4/IPv6, incident response, root-cause analysis, and disaster recovery planning.
• Automation and IaC: Automate provisioning, validation, and drift detection using Python, Ansible, Terraform, and CloudFormation, and fit network changes into version control and CI/CD.
• Monitoring and reliability: Improve telemetry, alerting, and runbooks; lead troubleshooting of complex issues across datacenter, firewall, and cloud networking.
• Leadership and influence: Act as the senior technical authority for networking, mentor engineers, work with vendors, carriers, and cloud providers, and communicate risks and decisions to leadership. Drive projects forward across SRE, Platform Engineering, and engineering teams, influencing and aligning teams beyond your own to adopt network standards and make changes.
• Other duties as needed

About You

• 15+ years in network engineering, datacenter networking, cloud networking, or infrastructure architecture.
• Proven record of owning a network architecture end to end and leading major network transformations, from design through delivery.
• Demonstrated hands-on AWS network architecture: VPC, Transit Gateway, VPC peering, security groups and NACLs, Direct Connect, site-to-site VPN, and hybrid connectivity to physical datacenters.
• Deep knowledge of TCP/IP, Layer 2/3, VLANs, VRFs, BGP, OSPF, LACP, and high-availability design, with hands-on enterprise switching and routing experience.
• Practical experience with segmentation, firewall integration, routing policy, and IP address management.
• Network automation and infrastructure-as-code experience with Python, Ansible, Terraform, CloudFormation, or comparable tools.
• Strong troubleshooting skills across datacenter, AWS, firewalls, and hybrid connectivity, and the ability to write clear architecture diagrams and technical documentation.
• Ability to influence and align engineering teams you do not manage, and to communicate risks and decisions to senior leadership and vendors.
• Able to travel to the Austin datacenter as needed, with occasional after-hours maintenance or incident response.
• Engineer strategic solutions (including advanced NAT/PAT and VRF segmentation) to resolve overlapping CIDR block challenges during multi-tenant cloud integrations.
• Architect highly scalable, hierarchically structured CIDR blocks to maximize address efficiency and minimize routing table sizes via route summarization.
• Architect and implement high-availability hybrid paths connecting enterprise datacenters (e.g., Element Critical) to major cloud providers like AWS and Azure.
• Design robust WAN transit architectures leveraging AWS Direct Connect, Azure ExpressRoute, SD-WAN, and managed MPLS networks.

Nice to haves

• AWS Certified Advanced Networking – Specialty and/or Solutions Architect – Professional.
• AWS Cloud WAN, Network Firewall, PrivateLink, and multi-account shared services design.
• Experience leading a VPN or remote-access replacement.
• Juniper, Cisco, or Arista platforms; Juniper Mist; VXLAN/EVPN fabrics; IPv6 design.
• Familiarity with virtualization networking, enterprise storage, and bare-metal infrastructure; network telemetry and observability tools.

What You’ll Love

We are a collaborative, kind, and curious community.

We honor your flexibility needs with full-time work that is hybrid remote.

We have you covered with our comprehensive benefits package, which includes medical, dental, and vision insurance.

We help you prepare for your financial future with our 401(k) plan.

We prioritize your work-life balance with our unlimited PTO.

We reward your work with opportunity for growth and advancement.

Additional Information

This position is NOT eligible for Visa sponsorship.

*Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. We will consider all qualified candidates who reside outside of the city proper or are willing to self-relocate.

#LI-KS2

#LI-Remote

Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to location, market demands, experience, job-related knowledge, and skills. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage and PTO. This position may also be eligible for bonus, commission, equity, or other incentive compensation, as applicable.

Base salary hiring range for roles based in California, Colorado, Maryland, New Jersey, or Washington

$1—$2 USD

Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to location, market demands, experience, job-related knowledge, and skills. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage and PTO. This position may also be eligible for bonus, commission, equity, or other incentive compensation, as applicable.

Base salary hiring rang for roles based in New York

$1—$2 USD

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, veteran status, or any other status protected by applicable law. We are committed to providing an inclusive and diverse work environment.

Candidate Privacy

When you apply, NinjaOne collects and uses your personal information to review your application and manage the hiring process. To learn how we use, store, and protect your data, and what your rights are, please read our Candidate Privacy Policy at https://www.ninjaone.com/candidate-privacy-policy.