Network SME

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Infrastructure Architects are the key link between Kyndryl and our clients. You're in a technical leadership role, uniting and guiding stakeholders from clients, governance, and project executives to delivery and sometimes even the vendors who work with the client. You'll be there from the start of a project - understanding what's needed and figuring out the best technical solution. And you'll be there at the finish, delivering the right product on time and within budget.

As an Infrastructure Architect, you'll draw upon the full breadth of your talent and experience. This is a technical leadership role, so we want you to bring your vision, knowledge, and leadership to each project. To the client, you're the subject matter expert - consulting early, gathering inputs, understanding what they need from our solution. You define what Kyndryl can do to meet this solution. You design the best solution for the job. And finally, you're the tech leader for implementation.

At Kyndryl we support all major cloud platforms, so you'll get the chance to use everything you know - and then some. You'll also become expert at knowing when and how to call on other SMEs outside your wheelhouse. Thinking your way around pre-existing limitations will grow your creativity and flexibility. You'll learn a lot here, and if you want to work toward certifications there are plenty of opportunities.The rewards for all this are many. You'll get to influence, create, and deliver something from start to finish. You will have the power to delight our clients.

• Having 7+ years experience Architect, design, and implement LAN, WAN, and data center networks using Arista switches, routers, and spine-leaf architectures.
• Design scalable and resilient L2/L3 network topologies, ensuring fault tolerance, redundancy, and optimal performance.
• Plan and implement segmentation, QoS, multicast, and load balancing strategies for mission-critical applications.
• Evaluate emerging network technologies (e.g., SDN, EVPN-VXLAN, automation frameworks) and recommend adoption strategies.
• Create high- and low-level design documents (HLDs/LLDs) and ensure adherence to architecture standards.

• Serve as L3 escalation point for complex routing, switching, and firewall incidents.
• Troubleshoot connectivity, latency, packet loss, and configuration issues across multi-vendor environments.
• Analyze network performance metrics using monitoring tools (SolarWinds, NetBrain, ThousandEyes, etc.) and recommend optimizations.
• Perform change management and risk assessments for configuration updates, upgrades, and migrations.
• Lead root cause analysis (RCA) for critical incidents, ensuring corrective and preventive measures are implemented.

• Configure, manage, and troubleshoot Palo Alto Next-Generation Firewalls (NGFW), Panorama, and security policies.
• Design and enforce network security zones, segmentation, and access control policies.
• Implement VPNs (IPSec / SSL), GlobalProtect, and App-ID, User-ID, and Threat Prevention modules.
• Monitor and respond to security alerts, coordinating with SOC or InfoSec teams for incident mitigation.
• Maintain compliance with security frameworks (ISO 27001, PCI-DSS, GDPR, etc.) through proper network security governance.

• Deep knowledge and hands-on experience with routing protocols: BGP, OSPF, EIGRP, IS-IS, and static routing.
• Configure and troubleshoot switching technologies: VLANs, VTP, STP, RSTP, EtherChannel, and port security.
• Implement and manage redundancy mechanisms such as HSRP, VRRP, GLBP.
• Optimize WAN connectivity through dynamic path selection, QoS tuning, and traffic shaping.
• Ensure network resilience through failover testing, link redundancy, and load balancing.

• Design and maintain Arista data center and campus networks using CloudVision, EOS, and VXLAN-EVPN architectures.
• Automate network provisioning using Arista CloudVision Portal (CVP) and eAPI/Ansible for configuration management.
• Analyze and troubleshoot Arista telemetry data to ensure optimal performance.
• Collaborate with engineering teams to adopt intent-based networking and network automation practices.

• Maintain up-to-date network topology diagrams, asset inventories, and configuration repositories.
• Document all incidents, changes, and root cause analyses in accordance with ITIL and internal audit processes.
• Develop and maintain SOPs (Standard Operating Procedures) and knowledge base articles for recurring operations.
• Participate in capacity planning, risk assessments, and disaster recovery (DR) readiness testing.

• Work closely with security, cloud, and infrastructure teams to ensure cohesive architecture across all environments.
• Support network integrations with AWS, Azure, or hybrid cloud platforms.
• Partner with vendors (Arista, Palo Alto, Cisco, Juniper) for support escalations and technical updates.
• Mentor junior engineers and lead technical knowledge-sharing sessions.

• Arista Networks:
  
  
  • Strong hands-on experience with Arista EOS, CloudVision, VXLAN-EVPN, and Leaf-Spine architectures.
  • Network automation using Python, Ansible, or Arista eAPI is an advantage.
• Palo Alto Networks:
  
  
  • Configuration and administration of Palo Alto Firewalls and Panorama management console.
  • Expertise in App-ID, URL Filtering, Threat Prevention, WildFire, and GlobalProtect VPNs.
• Routing & Switching:
  
  
  • Strong command of BGP, OSPF, EIGRP, IS-IS, STP, VLANs, and QoS.
  • Hands-on experience with Cisco or Juniper routers and switches.
  • Familiarity with network automation tools and monitoring platforms (SNMP, NetFlow, Syslog).
• Cross Skills:
  
  
  • Basic to intermediate knowledge of Linux, Load Balancers (F5 / Citrix ADC), and SD-WAN.
  • Familiarity with VPNs, MPLS, DNS/DHCP, and NTP configurations.
  • Cloud networking exposure with AWS / Azure VPC, Transit Gateway, Direct Connect / ExpressRoute.