• Define and maintain the target network architecture across LAN, WAN, data centers, and remote sites.
• Design segmentation strategies using VLAN, VRF, and micro segmentation to isolate IT, industrial, physical security, and guest environments.
• Design routing, switching, wireless, and interconnection solutions.
• Define redundancy and failover architectures to ensure high availability.
• Produce and maintain technical documentation, including network topologies, addressing plans, flow matrices, cabling, and rack layouts.
• Evaluate network technologies and vendors.
• Lead proofs of concept and technical evaluations
• 
  

Network Security & Resilience:

• Define and enforce firewall policies, filtering rules, and inter-zone traffic controls.
• Design and maintain secure remote access and site-to-site connectivity using VPN, SD-WAN, and zero-trust access.
• Implement network access control and authentication mechanisms, including 802.1X, RADIUS, and certificate-based access.
• Contribute to business continuity and infrastructure resilience through redundant links, failover testing, and recovery procedures.
• Participate in security reviews, audits, and compliance initiatives such as ISO 27001, SOC 2, or equivalent frameworks