Role Overview
Serves as the lead network architect for transition from a VPC Peering hub-and-spoke topology to a Google Cloud Network Connectivity Center (NCC) fabric. Oversees the planning, execution, and delivery of the network-focused NCC program, ensuring alignment with business goals, timelines, and budget. Owns the NCC target-state design across hub/spoke fabric, hybrid connectivity (including Cross-Cloud Interconnect to Azure), IPAM, routing, and DMZ insertion delivering a scalable, self-service connectivity model that removes VPC Peering scaling limits while preserving existing security inspection and egress controls.

Key Responsibilities
Lead discovery workshops and requirements gathering with network and application stakeholders.
Own current-state analysis VPC Peering limits, Cross-Cloud Interconnect VLANs, DMZ / Palo Alto egress, IPAM, and routing exceptions.
Assess cross-cloud interconnects to Azure, Azure coordination requirements, and BGP routing validation; evaluate the DNS roadmap and integration.
Assess compatibility of the current-state environment with NCC prerequisites, dependencies, and readiness criteria.
Design the target NCC architecture: hub/spoke fabric, hybrid connectivity, IPAM, routing, DMZ insertion, and extensibility.
Prepare and deliver NCC education workshop(s) for teams.
Author the Technical Design Document (HLD/LLD) and drive design reviews, iteration, and architecture sign-off with.
Engage Google product/engineering on platform limits and roadmap.
Provide architectural direction into Terraform IaC module structure, the migration Method of Procedure (MOP), pilot, and production cutover wave sequencing.
Guide high-risk central events Hub VPC + CCI/Azure cutover and DMZ / Palo Alto egress cutover and the legacy VPC Peering decommission.
Ensure the delivered model is self-service, preserves existing security inspection and egress controls, and stays aligned to scope, timeline, and budget.

Primary Deliverables
Current-state analysis findings.
Target NCC architecture design (hub/spoke fabric, hybrid connectivity, IPAM, routing, DMZ insertion).
Technical Design Document (HLD/LLD).
NCC education workshop materials.
Cutover program / wave plan and per-BU readiness (jointly with the engineering team).

Required Qualifications
Extensive network architecture experience with deep, hands-on Google Cloud networking.
Proven design of large-scale GCP network topologies Shared VPC, VPC Peering, and hub-and-spoke fabrics and migration toward Network Connectivity Center (NCC).
Strong command of hybrid connectivity: Cloud Interconnect / Cross-Cloud Interconnect (to Azure), Cloud Router, and BGP routing.
Expertise in IPAM, routing design, DNS, and DMZ / egress-inspection architectures (e.g., Palo Alto).
Ability to author HLD/LLD design documentation and lead design reviews through to architecture sign-off.
Experience planning wave-based production cutovers and rollback strategies for high-risk network changes.
Excellent stakeholder-management, workshop-facilitation, and communication skills.

Preferred Qualifications
Google Cloud Professional Cloud Network Engineer and/or Professional Cloud Architect certification.
Direct experience implementing NCC (hub, spokes, route tables, hybrid attachments).
Terraform / Infrastructure-as-Code fluency for network automation.
Multi-cloud networking (GCP Azure) and enterprise egress / security-inspection design.
Experience in large, regulated, enterprise-scale (e.g., retail) environments.
Core Technology Environment
Google Cloud networking Network Connectivity Center (NCC), Shared VPC, VPC Peering, Cloud Router, Cloud Interconnect / Cross-Cloud Interconnect to Azure, BGP, IPAM, and Cloud DNS; DMZ / Palo Alto egress inspection; hub-and-spoke and hybrid-connectivity fabrics; and Terraform / Infrastructure-as-Code for network automation.