Job description

• Conduct a comprehensive assessment of the GB/BFF network infrastructure and identify all dependencies associated with the existing Domain Controllers and Active Directory. • Document the current-state network architecture, including LAN/WAN architecture, internet connectivity, firewalls and security zones, VLANs and IP addressing, routing and switching, DNS/DHCP, VPN and remote access, network segmentation, site-to-site connectivity, cloud connectivity, and network security controls. • Review existing firewall rules, ACLs, routing policies, NAT, VPNs, and other network security configurations. • Identify legacy, redundant, undocumented, or unnecessary network dependencies that could impact the separation. • Assess potential IP address overlap, subnet conflicts, DNS dependencies, and routing conflicts domains. • Identify network risks, gaps, and single points of failure. • Design the target-state network architecture for Support an independent and secure operating environment. • Develop the target-state design for: IP addressing and subnet strategy, VLAN architecture, routing architecture, firewall/security-zone architecture, internet connectivity, VPN architecture, DNS/DHCP architecture, network segmentation, remote-access architecture, and cloud connectivity. • Ensure the architecture supports high availability, scalability, security, and future growth. • Design appropriate segmentation between user networks, server networks, management networks, security infrastructure, guest networks, and critical applications. • Work closely with the Active Directory/Identity Architect to identify all network requirements for separating Domain Controllers from domains • Identify required communication flows between Domain Controllers and DNS, DHCP, domain-joined servers, workstations, applications, Microsoft 365/Azure/Entra ID, and security and management platforms. • Define required firewall ports, protocols, routes, and network flows. • Develop network requirements for new Domain Controllers in domain and ensure they are placed in appropriate, secured network segments. • Validate DNS architecture and name-resolution requirements during the separation. • Ensure there are no unintended network dependencies that could leave • Create detailed current-state and target-state network diagrams. • Maintain network topology and connectivity documentation. • Develop an IP address/subnet inventory, VLAN inventory, firewall rule matrix, network flow matrix, routing matrix, DNS dependency matrix, and application-to-network dependency matrix. • Document all assumptions, risks, constraints, and technical decisions.

Requirements

Must-haves

Conduct a comprehensive assessment of the GB/BFF network infrastructure and identify all dependencies associated with the existing Domain Controllers and Active Directory.
Review existing firewall rules, ACLs, routing policies, NAT, VPNs, and other network security configurations.
Identify legacy, redundant, undocumented, or unnecessary network dependencies that could impact the separation.
Assess potential IP address overlap, subnet conflicts, DNS dependencies, and routing conflicts domains.
Identify network risks, gaps, and single points of failure.
Design the target-state network architecture for Support an independent and secure operating environment.
Ensure the architecture supports high availability, scalability, security, and future growth.
Design appropriate segmentation between user networks, server networks, management networks, security infrastructure, guest networks, and critical applications.
Work closely with the Active Directory/Identity Architect to identify all network requirements for separating Domain Controllers from domains
Identify required communication flows between Domain Controllers and DNS, DHCP, domain-joined servers, workstations, applications, Microsoft 365/Azure/Entra ID, and security and management platforms.
Define required firewall ports, protocols, routes, and network flows.
Develop network requirements for new Domain Controllers in domain and ensure they are placed in appropriate, secured network segments.
Validate DNS architecture and name-resolution requirements during the separation.
Ensure there are no unintended network dependencies that could leave
Create detailed current-state and target-state network diagrams.
Maintain network topology and connectivity documentation.
Develop an IP address/subnet inventory, VLAN inventory, firewall rule matrix, network flow matrix, routing matrix, DNS dependency matrix, and application-to-network dependency matrix.
Document all assumptions, risks, constraints, and technical decisions.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azure

Platform: careers-browser
Effort: medium