Define and maintain Flutter’s network architecture standards, patterns, and reference designs for AWS and hybrid networking.
Own and evolve the architectural roadmap for the Global Network, aligned to platform strategy and business objectives.
Produce, review, and assure High-Level Designs (HLDs) and collaborate with engineering teams in defining Low-Level Designs (LLDs) for Flutter Group network and cloud implementations.
Support the onboarding of products and services through comprehensive Platform Integration Designs (PIDs), including the migration and integration of existing products and services to the target solution, ensuring seamless transitions with minimal business disruption.
Work closely with Engineers and architects to steer design decisions, providing critical input on operational considerations, constraints, and implementation approach.
Act as a trusted subject matter expert for cloud networking and network security architecture across Flutter Technology.
Lead and contribute to proof-of-concept initiatives evaluating new technologies and architectural approaches to improve scalability, resilience, and operational capability.
Define secure ingress/egress patterns, east-west inspection, and segmentation models supporting production and non-production environments.
Ensure alignment with security frameworks, regulatory requirements, and industry standards across all network architectures.
Oversee secure network integration and connectivity with other Flutter divisions and external third parties, ensuring controlled, compliant access patterns.
Embed operability into designs through standards, runbooks, and service ownership models, enabling effective day-2 operations.
Promote Infrastructure as Code (IaC) and automation-first delivery approaches in partnership with engineering teams.
Support robust disaster recovery strategies, risk management, and major incident response by ensuring resilient architectural patterns.
Facilitate the development and communication of Flutter Group standards for network design, development, and deployment.
Enable and support engineering teams with adoption of cloud networking services through guidance, training, and design clinics.
Liaise with AWS, vendors, and partners on networking solutions, integrations, and architectural alignment.
Write and maintain comprehensive architecture documentation, reference designs, and decision records.
Requirements
Extensive experience designing and governing enterprise-scale network architecture within highly available AWS environments.
Demonstrated ability to lead large-scale cloud network architecture and transformation programmes, including multi-region deployments.
Deep expertise with AWS networking services including but not limited to: AWS Cloud WAN, Transit Gateway, VPC design, Direct Connect, VPN, Route 53, VPC Endpoints / PrivateLink, NAT Gateway, Internet Gateway (IGW), VPC Peering, AWS Outpost and load balancing services (ALB, NLB, GWLB).
Proven experience with network security architecture and implementation including firewall policy development (AWS Network Firewall, Palo Alto), IDS/IPS management (Suricata), segmentation models, AWS Shield, and security controls (Security Groups, Network ACLs).
Mastery with Infrastructure as Code methodologies using CDK for Terraform (CDKTF), TypeScript, Terraform, and CloudFormation at scale.
Strong experience with source control management (Git, GitHub) and CI/CD pipeline integration for network automation.
Expert-level understanding of networking protocols: TCP/IP, BGP, OSPF, VLANs, routing, switching, and IP addressing.
Extensive experience with IP addressing and IPAM strategies, including RFC1918, RFC6598, and complex allocation schemes.
Delivering and operating systems in stringent security-compliant environments with strong service management practices.
Network monitoring, logging, and observability tools, including AWS CloudWatch, Grafana, or similar.
Producing comprehensive, clear, and actionable architecture documentation and operational guides.
Passion for mentoring, coaching, and growing engineering talent across multi-disciplinary teams.
Working in an agile environment with cross-functional teams.
Understanding of key ITSM processes including Incident, Change, Problem, and Risk Management, with demonstrated ability to work within established service management frameworks to ensure operational excellence and continuous improvement.
Bonus points for previous software engineering experience (Python, TypeScript, Go), container networking (EKS, ECS), wireless infrastructure (Cisco, Aruba), AWS certifications, or experience in highly regulated industries.