Network Infrastructure Cloud Architect

About Ropes & Gray Ropes & Gray is a preeminent global law firm. The firm has been ranked in the top three on The American Lawyer's prestigious A-List for eight consecutive years and #1 on Law.com's UK A-List twice in the past three years—rankings that honor the "best of the best" law firms. The firm has approximately 2,500 lawyers and professionals serving clients in major centers of business, finance, technology, and government in Boston, Chicago, Dublin, Hong Kong, London, Los Angeles, Milan, New York, Paris, San Francisco, Seoul, Shanghai, Silicon Valley, Singapore, Tokyo and Washington, D.C. The firm has consistently been recognized for its leading practices in many areas, including asset management, private equity, M&A, finance, real estate, tax, antitrust, life sciences, health care, intellectual property, litigation & enforcement, privacy & cybersecurity, and business restructuring. Ropes & Gray is an equal opportunity employer. Overview The Network Infrastructure Cloud Architect is a senior level role in the IT Department responsible for supporting the design and architecture of the firm's data, wireless, video, and VOIP networks, as well as cloud and IaaS based network connectivity, with a primary focus on Microsoft Azure and familiarity with other major cloud platforms (AWS, GCP). The Network Infrastructure Cloud Architect approaches solution designs with a high level of ownership to deliver secure and operationally sound solutions across both on-premises and cloud environments. This role encompasses three key areas of focus: physical and cloud-based designs that illustrate how the network integrates with the enterprise, logical/secure designs to meet defined solution requirements including cloud-native security controls and identity-based network segmentation, and monitoring/measuring that validates the expected digital experience and business value across hybrid and multi-cloud deployments. The Network Infrastructure Cloud Architect will make recommendations for emerging cloud and networking technologies, including software-defined networking, cloud-native services, and infrastructure as code practices. This position requires an active review of designs to ensure that all business requirements, technical requirements, and monitoring objectives are met across on-premises and cloud infrastructure. The Network Infrastructure Cloud Architect will collaborate across the network team and other IT stakeholder groups to propose security, scalability, availability, supportability, and cost improvements, leveraging cloud-native capabilities where appropriate. In addition, the Network Infrastructure Cloud Architect will provide technical guidance across the organization, from cloud migration strategy and strategic decision advice down to the project planning level. Responsibilities ESSENTIAL FUNCTIONS: • Contributes to the strategic design and architecture of the firm's data network environment, including hybrid cloud connectivity and Azure virtual networking (VNets, ExpressRoute, Azure Virtual WAN). • Contributes to the design, deployment, and maintenance of various network systems and components including: routers, switches, internet services, wide area network services, wireless networks, VPNs, firewalls, video networks and related infrastructure, VoIP network and related infrastructure, security, cloud network gateways, and performance management and monitoring systems. • Design and manage cloud network architectures in Azure, including hub-and-spoke topologies, network security groups, Azure Firewall, Private Link, and DNS integration, with awareness of equivalent services in AWS and GCP. • Participate in physical build planning and design for new spaces, as well as cloud landing zone design and implementation. Scope, recommend, design, plan, oversee, and test inter-rack and station cabling for office, MDF, IDF, and datacenter builds and refreshes, alongside cloud infrastructure provisioning using infrastructure as code tools such as Terraform or Azure Resource Manager templates. • Configure on-premises and cloud-based networks to ensure their smooth and reliable operation for fulfilling business objectives and processes. • Evaluate emerging cloud and networking technologies, including Azure-native services, SD-WAN, SASE, and zero trust network architectures, and recommend purchase, development, or enhancement of network hardware and software. • Recommends performance standards, processes, policies, and procedures for both on-premises and cloud network environments. • Provide senior level technical support for network elements, systems, and cloud networking services. • Design and provide for the monitoring of network performance across on-premises and cloud environments using tools such as Azure Monitor, Azure Network Watcher, and third-party observability platforms, and troubleshoot problem areas as needed. • Collaborate with executive management and department leaders to assess near and long-term network capacity needs, including cloud resource planning and cost optimization strategies. • Create and maintain documentation as it relates to network architecture and network configuration, including cloud network topology diagrams, runbooks, and infrastructure as code repositories. • Assures knowledge transfer for new systems, including cloud-based services and hybrid connectivity solutions. • Coordinate with other members of the firm for business continuity and disaster recovery programs, including cloud-based disaster recovery, geo-redundancy planning, and Azure Site Recovery configurations. OTHER RESPONSIBILITIES: • Performs other work-related duties as assigned. Essential Capabilities • Must demonstrate the ability to maintain strict confidentiality of the firm's internal and personnel affairs. • Ability to influence at all levels of the organization. • Must be a self-starter who understands the details within a much larger content. • Ability to work in a teamwork/collaborative style and environment. • Must be creative and flexible when responding quickly and positively to shifting demands and opportunities; ability to work under tight deadlines and handle multiple, detailed tasks. • Must be a team-oriented person who can share information, goals, opportunities, successes, and failures with the appropriate parties. • Ability to organize, plan and carry out multiple related activities. • Must pay attention to details and be able to follow up and follow through. • Ability to work effectively in a multi-office environment. Qualifications EDUCATION, EXPERIENCE AND SKILLS REQUIRED: • Bachelor's Degree or equivalent experience. • 7+ years experience in network field. • Proven experience and success with planning, installing and managing networks including LAN, MAN, WAN, Optical Networking, Silverpeak SDWAN Optimizers, F5 Load Balancers, iRules, F5 Global Traffic Manager, Infoblox/BloxOne, Illumio, Checkpoint firewalls, Checkpoint Identity Collector, VPN, DMZ, IDS/IPS, Zscaler Web Proxy, content filter, NAC and Cisco ISE, Ciena DWDM, 100 Gig optics, DNS Traffic Control, Cisco ACI & NXOS, SDN, network segmentation, Cisco Catalyst center, Cisco CLI, ACL management, SNMP MIB’s, Aruba wireless controllers and AP’s, SSL certificate creation and management, DNS Domain registration, Citrix Netscaler, VMware NSX, network taps, Extrahop. • Azure networking solutions including Virtual Network Peering, VPN Gateway, and ExpressRoute to support SaaS and cloud-based initiatives. • Familiarity with IaC (infrastructure as code), ex. Ansible, Terraform, Azure Resource Manager, Chef. • Familiarity with EntraID, Active Directory, LDAP, PKI, SAML, OAUTH, SSO. • Network Monitoring and Tools (OpenView, Spectrum, NetScout, Gigamon, APCON, NetMRI, MRTG, CACTI, Solarwinds, SmokePing, NetFlow, Tufin, Splunk and syslog) • Proven experience with network capacity planning, security principles, and general network management best practices and optimizations f