Network & Observability Architect

The Network & Observability Architect is responsible for architecting, designing, and continuously evolving enterprise observability and network management platform, providing end-to-end visibility across the business network, infrastructure, applications, and digital services.

You will own the strategy and architecture for network management tools including SevOne, Cisco (DNA Centre, ThousandEyes, ACI), Splunk, and ServiceNow (ITOM, ITSM, AIOps, Service Graph), alongside adjacent monitoring and automation platforms. You will also drive AIOps capabilities leveraging LLM, Agentic AI, RAG, and RCA to extract value from monitoring, telemetry, automation, and ITSM data, supporting a unified observability ecosystem aligned to our reliability, compliance, and operational excellence goals.

This role requires a deep understanding of network operational techniques and procedures, combined with expertise in cutting-edge technologies that support modern network operations.

Key Responsibilities

AI, Data Lake & Observability Strategy:

• Define the enterprise Data Lake strategy, including reference architecture, standards, and target operating model
• Define data ingestion, retention, indexing, extraction, and tiering strategies aligned with compliance, performance, and business needs
• Define the GenAI/LLM and Agentic AI architecture strategy, including RAG patterns, agent frameworks, evaluation/guardrails, and production deployment standards
• Establish architecture standards for batch and streaming processing, and for domain-oriented, governed data product delivery
• Own the network observability strategy and reference architecture — covering metrics, logs, traces, events, flows, packets, and synthetic monitoring

Network Management Tools:

• Establish a single pane of glass strategy by integrating SevOne, Splunk, ServiceNow, and other NPM/APM tools into a cohesive ecosystem

Network Automation & Development:

• Lead the build and selection of automation platforms, including complex network automation and Network AIOps solutions
• Act as technical lead for documentation, automation platforms, and use case definition
• Design and document system architectures, data flows, and integration points for network-centric applications

Multi-Vendor Tooling

• Architect Cisco's network management and assurance stack: Catalyst Centre, ThousandEyes, ACI/APIC, and Nexus Dashboard
• Design ThousandEyes deployments for internet, cloud, SaaS, and digital experience monitoring
• Architect Splunk Enterprise/Cloud deployments, including indexers, search heads, and forwarders
• Align observability with ITSM processes — Incident, Problem, Change, Configuration, and Service Level Management

What You’ll Bring

• Extensive experience in IT operations, network management, or observability, with at least 3 years in architecture/design roles
• Hands-on experience implementing and scaling at least three of: SevOne, Splunk, ServiceNow ITOM, Cisco DNA/ThousandEyes
• Proven experience delivering cloud-native Data Lake/Lakehouse platforms at enterprise scale
• Hands-on experience with Airflow, Spark, and Flink (or similar) in production environments

Technical Skills

• AIOps: event correlation, anomaly detection, root cause analysis, topology-based correlation
• Data Lake/Lakehouse patterns, metadata/catalogue, lineage, and data quality controls
• RAG design: ingestion, chunking, embeddings, retrieval/reranking, grounding
• Telemetry protocols: SNMP, syslog, NetFlow/IPFIX/sFlow, gNMI, NETCONF, gRPC, OpenTelemetry
• Networking fundamentals: BGP, OSPF, MPLS, VXLAN/EVPN, SD-WAN, Zero Trust/SASE
• Cloud networking and observability across AWS, Azure, and GCP
• Scripting and automation: Python, Ansible, Terraform, Git, CI/CD pipelines

Why This Role

This is an opportunity to shape how a leading global organisation sees, monitors, and manages its entire digital estate, combining deep network expertise with cutting-edge AI and data architecture, and influencing decisions at CIO, CTO, and CISO level.

Working at DevNull Security

Whilst DevNull Security is a remote-first company, our consulting team may be required to travel to client sites up to 3 times per week, depending on project and customer needs.

We believe that a career in cybersecurity should be accessible to everyone. We actively welcome applicants from all walks of life, regardless of race, ethnicity, gender identity, age, sexual orientation, disability, neurodiversity, socioeconomic background, or any other aspect of identity.

As a growing company, we’re committed to fostering an inclusive, equitable, and accessible hiring experience. We proactively offer adjustments during application and assessment - tell us what you need.