Datacenter Architect - Vmware Vsphere

Role Summary :

The Datacenter Architect is responsible for defining, designing, and governing end-to-end datacenter architecture across compute, storage, network, virtualization, security, facilities, and operations. This role ensures the datacenter environment is highly available, scalable, secure, cost-efficient, and aligned with business, regulatory, and resiliency requirements. The architect leads architecture strategy, standards, and roadmaps, and works closely with infrastructure engineering, operations, cybersecurity, facilities, vendors, and application teams to deliver reliable platforms for mission-critical workloads.

Key Responsibilities :

1) Architecture Strategy & Roadmap:

- Define the target-state datacenter architecture (on-prem, colocation, hybrid) aligned to business goals and capacity demands.

- Own the multi-year roadmap for datacenter modernization (e.g., virtualization refresh, storage strategy, network fabric evolution, automation).

- Establish and maintain reference architectures, patterns, and standards for repeatable deployment.

2) Infrastructure Design (Compute / Virtualization / Container Platforms):

- Design server and virtualization architecture (e.g., VMware vSphere/ESXi, Hyper-V, KVM) and capacity models.

- Define host/clustering standards, lifecycle practices, golden images, and patch strategies.

- Collaborate on container orchestration platform design (e.g., Kubernetes) where applicable, ensuring network, storage, and security integration.

3) Storage Architecture (SAN / NAS / Object / Backup):

- Design storage solutions across SAN/NAS/object and define tiering, replication, dedupe/compression, and performance standards.

- Own storage availability designs (active-active/active-passive), backup architecture, and restore validation.

- Lead data protection strategy including backup, retention, immutability, ransomware resilience, and archival.

4) Network & Connectivity Architecture:

- Design datacenter network topology (core/leaf-spine, segmentation, VRF/VLAN, routing, QoS).

- Define secure connectivity patterns for WAN/Internet, DC interconnect (DCI), and cloud connectivity.

- Ensure architectures support load balancing, DNS/DHCP, NTP, and resilient controlplane design.

5) Security Architecture & Compliance:

- Embed security-by-design : micro-segmentation, firewall zoning, IDS/IPS, PAM integration, encryption, key management.

- Ensure compliance with internal policies and external frameworks/standards (as applicable) : ISO 27001, SOC controls, PCI DSS, etc.

- Partner with cybersecurity teams on threat modeling, vulnerability management, and security architecture reviews.

6) High Availability, DR & Business Continuity:

- Define and validate HA/FT patterns and disaster recovery architectures (RPO/RTO aligned).

- Lead DR design for critical workloads and ensure DR drills, runbooks, and recovery testing are executed.

- Govern dependency mapping and single points of failure elimination.

7) Datacenter Facilities & Physical Design (in partnership with Facilities):

- Collaborate with facilities on power (UPS/gensets), cooling, rack layouts, cabling, and environmental monitoring.

- Define standards for rack density, power budgeting, and expansion planning.

- Ensure physical security integration : access control, CCTV, visitor controls, and audit readiness.

8) Automation, Observability & Operational Excellence:

- Drive Infrastructure-as-Code and configuration automation (e.g., Ansible, Terraform where applicable).

- Architect monitoring/observability : metrics, logs, traces, synthetic monitoring, and alerting strategies.

- Improve operations through standardization, SRE principles, and reduction of toil (selfservice provisioning, automated remediation).

9) Governance, Documentation & Stakeholder Management:

- Chair architecture review boards and ensure solutions adhere to enterprise standards.

- Produce and maintain architecture documentation : HLD/LLD, diagrams, BOMs, SOPs, as-built and runbooks.

- Lead vendor evaluations, RFPs, and design workshops; ensure vendor solutions meet requirements and are supportable.

Key Deliverables :

- Datacenter target architecture and reference designs

- Capacity plans (compute/storage/network) and lifecycle refresh schedules

- HLD/LLD and implementation standards

- Security zoning and segmentation blueprints

- DR strategy, recovery runbooks, and test reports

- Automation standards (IaC patterns), monitoring/alert standards

- Bill of Materials (BOM), cost models, and TCO/ROI justification

Required Qualifications :

- Bachelors degree in Computer Science/Engineering or equivalent experience.

- 8 to 15+ years in infrastructure engineering/architecture with 37+ years in a datacenter architecture or lead design role.

- Proven experience designing and operating highly available datacenter environments for critical workloads.

- Strong understanding of infrastructure domains : compute, storage, network, security, and datacenter facilities fundamentals.

Technical Skills (Core) :

Compute & Virtualization :

- VMware vSphere/ESXi, vCenter, clusters/DRS/HA; alternatives (Hyper-V/KVM) a plus

- Server platforms (Dell/HPE/Cisco UCS), firmware lifecycle, out-of-band management (iDRAC/iLO)

- Performance tuning and capacity modeling

Storage & Data Protection :

- SAN concepts (FC/iSCSI), multipathing, zoning, storage arrays (e.g., Dell EMC/NetApp/HPE)

- NAS protocols (NFS/SMB), object storage concepts

- Backup platforms (e.g., Veeam, Commvault, NetBackup) and immutability strategies

Networking :

- Routing/switching (BGP/OSPF), segmentation (VRF/VLAN), EVPN/VXLAN (preferred)

- Load balancers (F5, Citrix ADC, NGINX), DNS/DHCP/IPAM

- DCI solutions, latency-aware design, redundant edge and uplinks

Security (Infrastructure-Centric) :

- Network security zones, firewalls (Palo Alto/Fortinet/Check Point), micro-segmentation (e.g., NSX)

- IAM/PAM integration, certificate management, encryption at rest/in transit

- Vulnerability management, hardening baselines (CIS), secure configuration governance

Automation & Observability :

- Scripting (PowerShell/Python), automation (Ansible), IaC (Terraform) helpful

- Monitoring stacks (SCOM, Zabbix, Prometheus, Splunk, ELK, Grafana), APM integration

- ITSM integration (ServiceNow) and operational metrics

Behavioural & Leadership Competencies :

- Strong stakeholder management and ability to translate business needs into technical architectures

- Clear written communication for executive-ready documentation

- Vendor management, negotiation, and contract/SLA understanding

- Analytical problem-solving, risk management, and decision-making under constraints

- Coaching/mentoring engineers and driving engineering standards

Preferred Certifications (Any of the below) :

- VMware : VCP-DCV / VCAP

- Network : CCNP/CCIE, Juniper JNCIP

- Storage/Backup vendor certifications (NetApp, Dell EMC, Veeam, Commvault)

- Security : CISSP / CCSP (or equivalent)

- ITIL Foundation (or higher)

- Cloud architecture certs (AWS/Azure/GCP) if hybrid-cloud is in scope

KPIs / Success Measures :

- Availability & stability : Reduction in P1/P2 incidents attributable to infrastructure design

- Performance : Improvement in latency/throughput and reduction in resource contention

- Resiliency : DR test pass rate; achieved RPO/RTO for critical services

- Standardization : Adoption of reference architectures and reduction in design deviations

- Cost efficiency : Improved utilization, reduced stranded capacity, optimized licensing/support costs

- Delivery outcomes : On-time/on-budget delivery of datacenter modernization milestones

- Security posture : Reduction in critical vulnerabilities and audit findings

Working Relationships :

- Internal : Infrastructure Engineering, Network, Storage, Compute, Security, Facilities, IT Operations, Application Owners, PMO, Procurement

- External : OEMs, system integrators, colocation providers, telecom/ISP partners, audit/compliance bodies