Network Architect / Lead Location: India (Bangalore / Ahmedabad / Remote) Job Function: IT – Infrastructure Engineering Date Posted: ASAP Requisition ID: 80192378 Remote, Hybrid or Onsite: [Hybrid / Remote] About the Role Here at Kraft Heinz, we grow our people to grow our business, because we believe that great people make great companies. When you join our table, you can expect access to an array of holistic wellness benefits and perks, including medical, dental and vision coverage, 401(k) matching, Business Resource Groups (BRGs) to help foster diversity, inclusion, and belonging for all employees, and an industry-leading total rewards package that emphasizes a high discretionary bonus. Benefits begin immediately upon hire for salaried employees. Get a peek into life here at Kraft Heinz through our Instagram and TikTok channels! Network Architect at a glance… The Network Architect sets the technical direction for Kraft Heinz’s global enterprise network. This is a senior architecture role accountable for the reference designs, standards, and multi year technology roadmap that connect our manufacturing plants, distribution centers, corporate offices, and cloud environments. You’ll architect end-to-end across LAN, WAN, SD-WAN, wireless, network security, Zero Trust Branch, DDI, and Azure connectivity — translating business priorities into durable, scalable patterns that engineering teams can build against. You’ll lead architecture governance, influence multi-year investment, and partner with leaders across Cloud, Security, Infrastructure, and Manufacturing IT to modernize how our global sites connect, secure, and perform. What’s on the menu Architecture & Strategy • Own the end-to-end target-state architecture for the enterprise network: LAN, WAN, SD WAN, wireless, branch, data center, network security, and Azure connectivity. • Define and maintain reference architectures, standards, and design patterns that engineering teams use to deliver consistently across the global estate. • Set the multi-year network technology roadmap aligned to business priorities, manufacturing modernization, and cloud strategy. • Lead architecture governance and design reviews, ensuring solutions meet security, resiliency, performance, and cost objectives. • Contribute to project planning, including investment cases, funding requests, and program-level case studies. Zero Trust, Security & Segmentation • Architect Zero Trust Branch and enterprise segmentation strategies, including least privilege connectivity, micro-segmentation, and identity-aware access. • Define network security architecture across platforms such as Palo Alto, Fortinet, Zscaler, and Aruba ClearPass, integrating with the broader enterprise security and compliance program. • Partner with the CISO organization to align network controls to Zero Trust principles, regulatory requirements, and audit obligations. • Establish and govern security protocols, business continuity patterns, and access control standards across the enterprise. Routing, DDI & Core Services • Establish enterprise routing architecture using BGP, OSPF, and modern segmentation patterns across hybrid environments. • Define standards for DNS, DHCP, and IP address management (DDI), IP schema, naming, and service resiliency across on-premises and cloud. • Architect VPN, site-to-site, and remote-access connectivity patterns for secure, scalable enterprise access. • Optimize end-to-end network paths and traffic engineering for application performance and operational predictability. Cloud & Hybrid Connectivity • Lead Azure networking architecture, including VNET topology, peering, route control, private endpoints, VPN Gateway, and ExpressRoute. • Define hybrid connectivity patterns between on-premises plants, distribution centers, and cloud workloads. • Partner with Cloud and platform teams to ensure network architecture enables — not constrains — application modernization. Branch & Site Modernization • Architect branch network modernization for our global manufacturing and distribution footprint, including SD-WAN and Zero Trust Branch patterns. • Improve user experience, application access, and operational simplicity at sites by reducing dependence on centralized backhaul. • Define site reference designs that scale across geographies and plant types. Leadership & Influence • Mentor staff and senior engineers; raise the technical bar across the networking discipline. • Partner with vendors and strategic technology partners on evaluations, proofs of concept, and roadmap alignment. • Translate complex technical trade-offs into clear, business-relevant recommendations for senior leadership. • Maintain authoritative network documentation — reference designs, topology diagrams, and standards — that the broader engineering organization can rely on. What you’ll need to be successful Must-haves • 10+ years of network engineering experience, with at least 3+ years in an architecture role at enterprise scale. • Demonstrated experience defining enterprise reference architectures and standards adopted across a multi-site organization. • Deep expertise across enterprise routing and switching (BGP, OSPF), segmentation, WAN, SD-WAN, and wireless. • Strong network security architecture experience with platforms such as Palo Alto, Fortinet, Zscaler, and Aruba ClearPass. • Strong Azure networking experience, including VNet design, peering, private connectivity, VPN Gateway, and ExpressRoute. • Experience with DDI (DNS, DHCP, IPAM), IP schema design, and core service resiliency. • Proven experience architecting Zero Trust Branch, micro-segmentation, or identity aware network access. • Bachelor’s degree in computer science, Information Security, Engineering, or a related field (or equivalent experience). • Proven ability to work across hybrid cloud and on-premises environments in a global, distributed enterprise. • Excellent communication skills, with the ability to translate complex technical issues clearly for both engineering and non-technical audiences. • Strong leadership, collaboration, and stakeholder engagement capabilities at the Director and VP level. Nice-to-haves • Experience in manufacturing, CPG, or other industrial environments with significant OT/IT convergence considerations. • Industry certifications such as CCIE, CCDE, Azure Network Engineer Associate, or TOGAF. • Experience leading vendor evaluations and architecture proofs of concept. • Familiarity with network automation, infrastructure as code, and enterprise observability platforms. Our Total Rewards philosophy Our Total Rewards philosophy is to provide a meaningful and flexible spectrum of programs that equitably support our diverse workforce and their families and complement Kraft Heinz’ strategy and values. Bonus: This position is eligible for a performance-based bonus as provided by the plan terms and governing documents. The compensation offered will take into account internal equity and may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. Benefits: Coverage for employees (and their eligible dependents) through affordable access to healthcare, protection, and saving for the future — we offer plans tailored to meet you and your family’s needs. Travel: Up to 10–15%, as needed.
Ahmedabad - Venus Stratum GCC
Kraft Heinz is an Equal Opportunity Employer – Underrepresented Ethnic Minority Groups/Women/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity and other protected classes .
