About the role
Dispel is seeking a Cloud Network Architect (IC6) to lead the design and evolution of secure, scalable network architectures across cloud, hybrid, and on-premise environments. This role operates at a senior individual contributor level, balancing strategic architecture, hands-on implementation, and cross-functional enablement.
You will translate complex business and security requirements into robust network designs, support mission-critical systems, and drive improvements across our infrastructure and engineering practices. This role requires both deep technical expertise and strong communication skills, as you will influence decisions across Engineering, Product, and Operations.
This is a remote role with up to 30% travel. Candidates must be able to pass an extensive background check.
Requirements
Key Responsibilities
Architecture & Design (Discovery)
- Lead the design of secure, scalable network architectures across cloud, hybrid, and on-prem environments
- Translate ambiguous or evolving business requirements into concrete, actionable technical designs
- Evaluate and communicate tradeoffs across cost, performance, scalability, and security
- Develop clear technical documentation and architecture diagrams
Implementation & Technical Leadership
- Contribute hands-on to implementation, prototyping, and lab environments
- Design and implement high-availability, fault-tolerant, and disaster recovery networking solutions
- Establish and promote best practices in network design, segmentation, and secure connectivity
- Guide adoption of modern networking patterns and cloud-native architectures
Network Security & Infrastructure
- Architect and implement secure networking solutions including VPNs, zero trust, SD-WAN, and segmentation strategies
- Oversee logics around routing, interconnectivity, and secure access across distributed systems
- Ensure systems meet security and compliance requirements
Enabling Others & Cross-Functional Impact
- Provide clarity and direction to enable execution across teams
- Recommend improvements to processes, tooling, and network architecture
- Partner with Product, Engineering, and Operations to align technical solutions with business goals
- Mentor engineers and elevate overall technical capability
- Participate in an on-call support for system reliability, including responding to incidents and performing after-hours troubleshooting as needed.
Qualifications
Required:
- 8+ years of experience in network engineering, cloud networking, or infrastructure architecture
- Proven experience designing secure, scalable network systems across cloud and hybrid environments
- Strong expertise in routing protocols (BGP, OSPF), Linux networking, and network segmentation
- Hands-on experience with VPN technologies (IPSec, WireGuard, OpenVPN), firewalls, IDS/IPS, and zero trust architectures
- Experience with high-availability networking and disaster recovery design
- Ability to communicate complex technical concepts and tradeoffs clearly
Preferred:
- Experience with cloud platforms (AWS, Azure) and infrastructure-as-code tools (Terraform, Bicep)
- Familiarity with compliance frameworks (SOC 2, FedRAMP, IEC 62443, etc.)
- Experience in regulated or critical infrastructure environments (e.g., utilities, defense, healthcare)
- Knowledge of secure remote access architectures (bastion hosts, SDP, etc.)
- Relevant certifications (e.g., CCNA, CCNP, or equivalent)
What Success Looks Like
- Network architectures are scalable, secure, and aligned with business needs
- Teams are enabled with clear designs and actionable direction
- Systems demonstrate high availability, reliability, and compliance readiness
- Technical decisions are well-documented and broadly understood
- Continuous improvements are made across infrastructure and processes
Benefits
- $155,000 – $169,000 salary range
- 401(k) w/ company match
- Unlimited paid time off
- Parental leave
- Full medical, dental, vision insurance
- Life insurance
- Disability insurance
- Health savings account
- Performance bonus and equity eligible
- Remote work
