How to become a Network Architect

Ideal starting backgrounds

You're ready to start this path if you can:

• Design a multi-site enterprise network with redundancy, failover, and QoS policies (not just implement existing designs)
• Explain BGP, OSPF, and when to use each; understand route summarization and convergence time
• Have led or mentored a team of 3+ network engineers
• Completed 5+ years of network engineering experience in production environments
• Understand enterprise compliance frameworks (SOX, PCI-DSS, ISO 27001) and how they affect network design
• Hold a CCNP-level certification and be working toward CCIE or equivalent

Not ready yet? Start with CCNP Enterprise or Service Provider path and gain 5+ years of hands-on engineering experience first. This is not a shortcut path.

Stage 1 — Anchor Certification (Already in role or Months 0–3)

Goal: Refresh and validate enterprise-level networking knowledge if not already CCNP-certified.

Stage 1 note: Most candidates for Network Architect roles already hold CCNP. If you don't, pass this exam first while working as a Senior Network Engineer.

Study approach: If needed, use INE, CBT Nuggets, or Cisco Learning Network for enterprise-focused deep dives. This is a refresher for most; new candidates should dedicate 10 hours/week.

Stage 2 — Expert Certification (Months 3–12)

Goal: Demonstrate expert-level knowledge through the CCIE Written and Lab exams—the gold standard for network architects.

Stage 2 total: $1,995 USD · R35,910 ZAR · 24–36 months

Study approach: CCIE is not a study-for-weeks path. Allocate 15–20 hours/week for 6–12 months. Use INE CCIE labs, Cisco's official blueprint, and real-world lab scenarios. Schedule the Written when you can consistently score 85%+ on practice exams. Only schedule the Lab after passing Written and completing 200+ hours of lab time.

Lab requirement: Build a full enterprise network in GNS3 or a dedicated CCIE lab platform. Simulate multi-site failover, BGP convergence, MPLS traffic engineering, and compliance audits. This is 300+ hours of hands-on work.

Stage 3 — Architecture Framework (Months 12–18)

Goal: Learn enterprise architecture frameworks that bridge technical design and business strategy.

Stage 3 total: $565 USD · R10,170 ZAR · 8–12 weeks

Study approach: Use official TOGAF study guides and Van Haren Publishing materials. The Foundation exam is straightforward; Practitioner requires applying TOGAF concepts to real scenarios. Schedule both within 3 months of each other.

Project milestone: Design a complete network modernisation strategy for a hypothetical Fortune 500 company migrating from legacy hub-and-spoke to cloud-first SD-WAN. Document the business case, technical architecture, phased migration plan, and risk mitigation. This becomes your portfolio piece for architect interviews.

Stage 4 — Vendor-Specific Depth (Months 18–24, Optional but Recommended)

Goal: Master one modern networking platform at an advanced level (beyond Cisco, into SD-WAN or cloud-native networking).

Optional at hire time: Many Network Architects land their first architect role after Stage 2 (CCIE) + Stage 3 (TOGAF) and complete vendor-specific certs while employed. This is standard.

Study hours required: 500–800 hours total (Stage 2–3). Assumes 15–20 hours/week over 24–36 months.

All figures: median base salary, not including bonuses/equity. ZAR = USD × 18 baseline (verified May 2026). Sources: Robert Half 2026, Glassdoor, PayScale, LinkedIn Salary.

South Africa note: Network Architects at Johannesburg-based banks (Nedbank, Standard Bank, ABSA) earn R90,000–R125,000/month (entry), scaling to R135,000–R180,000/month for Lead roles. Telcos (MTN, Vodacom) pay similarly. Remote positions for international clients push mid-level roles to R120,000–R160,000/month. Consultancies (Dimension Data, BCX) typically pay 10–15% below banks but offer better learning opportunities.

Salary accelerators: CCIE certification adds 15–25% premium. Cloud certifications (AWS Professional, Azure Expert) add another 10%. TOGAF and vendor-specific certs (Arista, Juniper) add 5–10% combined.

Phase 1: Months 0–12 — Get CCIE Written & Build Architect Portfolio

1. Commit to CCIE Written — Allocate 15–20 hours/week. Use INE video course + Cisco Learning Network labs.
2. Build a capstone design project — Design a disaster recovery network for a multi-region company. Use Visio for architecture diagrams and document all design decisions.
3. Present internally — Pitch your design to your current team or at a local Cisco Learning Network meet-up. Get feedback and iterate.
4. Mentor junior engineers — Architects spend significant time mentoring. Start formalising this now—document your knowledge.

Phase 2: Months 12–18 — Pass CCIE Written & Start TOGAF

1. Pass CCIE Written — Once this is done, you're "CCIE Written, Lab pending"—use this credential on your CV immediately.
2. Begin TOGAF study — 8–12 weeks part-time. Use official study materials and practice exams.
3. Network with architects — Join Cisco Architect community groups, attend enterprise networking conferences (Cisco Live), connect with architects at major financial institutions on LinkedIn.
4. Document network trends — Write 2–3 blog posts or LinkedIn articles about enterprise networking trends (SD-WAN adoption, zero-trust, cloud migration). Demonstrate strategic thinking.

Phase 3: Months 18–24 — Lab & Architect Interviews

1. Intensive CCIE Lab prep — 20–25 hours/week. This is full immersion. Schedule the lab when you're scoring 95%+ on full-length practice exams.
2. Target architect roles — Apply to enterprise architect positions at banks, telcos, large consultancies. Your CV should read "CCIE Written, TOGAF Certified, [Years] network architecture experience."
3. Interview prep — Be ready to discuss a major network redesign you led, design trade-offs, vendor selection criteria, and how you balance technical elegance with business constraints.
4. Negotiate for architect roles — Don't settle for "Senior Engineer" titles. Architect roles are where the salary and strategy come in.

Network Architect at a Fortune 500 Bank — Entry Level

08:00 — Review overnight emails. One data centre migration is scheduled for this weekend; review the runbook and sign-off on the change request. Check with the Network Operations Centre (NOC) on any incidents from yesterday.

09:00 — Strategy meeting with the CTO. Present a proposal for migrating from MPLS to SD-WAN across 30 branch offices. Walk through cost savings (35%), implementation timeline (6 months), and risk mitigation. This is a $2M decision.

10:30 — One-on-one with a Senior Network Engineer struggling with BGP design. Whiteboard through the problem, explain the business context (why we're using specific ASNs and route filtering), and set them up for success.

12:00 — Lunch

13:00 — Work with a security architect on zero-trust network design. Review firewall rules, micro-segmentation strategies, and how this affects network latency and compliance (PCI-DSS). This is a 12-month initiative.

14:30 — Vendor call with Cisco account team. Discuss hardware refresh options for core routers. Negotiate contract terms and licensing model.

15:30 — Documentation. Update the network architecture runbook with new QoS policies. This document is used by the NOC and on-call engineers.

16:30 — End of day. Update your architecture roadmap and send it to leadership. Network Architects spend ~30% of their time in strategic communication, not hands-on configuration.

Network Architect at a Cloud-Native Telco — Mid Level (10+ years)

09:00 — Board-level presentation on network infrastructure roadmap. Present 5-year strategy: shift from traditional backbone to cloud-native networking, projected ROI, and competitive advantage. This is where architect value shines.

10:30 — Technology evaluation. Vendors pitching intent-based networking platforms. You grill them on enterprise support, convergence times, and compatibility with your existing multi-vendor environment.

12:00 — Lunch with the VP of Infrastructure. Strategic discussion: should we build a network operations centre (NOC) in-house or outsource to a managed services provider (MSP)? Architect must understand business, not just technology.

13:00 — Design review with the architecture team (3 other architects covering security, cloud, and applications). Whiteboard a network design for a new 5G rollout. Debate trade-offs: latency vs. cost vs. resilience.

14:30 — Mentoring. Two architects reporting to you. One struggling with a complex multi-cloud network design; coach them through it. The other is studying for CCIE; review their lab work.

15:30 — Write RFP (Request for Proposal) for new WAN edge devices. You're the technical decision-maker for a $5M spend.

16:30 — End of day. Update the enterprise architecture model (in TOGAF terms). Review quarterly KPIs: network availability, latency, cost per Mbps. This is where architects prove ROI.

Market specifics

Network Architects are in strong demand across South Africa's financial sector, driven by major infrastructure modernisation initiatives. Nedbank, Standard Bank, and ABSA are all actively hiring architects to redesign networks for cloud, digital banking, and resilience. Telcos (MTN, Vodacom) are investing heavily in 5G network infrastructure and cloud-native architectures, creating architect roles. Large consultancies (Dimension Data, BCX, EOH) employ teams of 20+ architects supporting enterprise clients across sub-Saharan Africa.

Remote work is increasingly available for Network Architects in South Africa. Many Johannesburg-based architects work remotely for global banks or consultancies, earning international salaries (USD or GBP) while based in Cape Town or Durban. This can push mid-level architect salaries to R120,000–R160,000/month, compared to R90,000–R125,000/month for local roles.

BEE (Black Economic Empowerment) and EE (Employment Equity) considerations apply strongly. Large South African corporates have preferential hiring for previously disadvantaged individuals, and CCIE/TOGAF certifications help level the field by providing objective credential verification. Many firms offer bursaries or study sponsorships for EE candidates pursuing CCIE.

SA-specific resources

Q: Do I need a degree to become a Network Architect? No formal degree is required. However, most Network Architects have either a degree in Computer Science/IT or equivalent experience. What matters is your CCIE and TOGAF credentials, plus 7–10 years of hands-on experience. Degree holders sometimes reach architect roles in 5–7 years; non-degree holders typically need 10+ years. In South Africa, large corporates may prefer degrees, but CCIE often overrides this.

Q: How long does it realistically take from zero? If you're starting as a Help Desk technician with no networking knowledge: 10–12 years minimum. CCNP takes 2–3 years, CCIE takes another 2–3 years, and you need 5+ years of hands-on engineering experience between. Network Architect is not an entry-level path; it's a leadership destination after 10+ years of technical depth. Be honest with yourself about this timeline.

Q: Which cert should I do first? You must have CCNP (Enterprise or Service Provider) before attempting CCIE. CCNP itself takes 1–2 years. Once you're 3–5 years past CCNP (so 5–7 years total networking), start CCIE Written. This sequencing matters because CCIE labs test judgment and design sense that only come from years in production environments.

Q: Can I do this path while working full-time? Yes, absolutely. Most CCIE candidates study while working full-time. At 15–20 hours/week, CCIE Written takes 6–12 months; Lab takes 12–24 months. TOGAF takes 8–12 weeks part-time. The challenge is maintaining focus for 24–36 months. Many architects find a study partner or join a study group to stay accountable.

Q: Is CCIE worth it for this role? For Network Architect roles at enterprise banks, telcos, and large consultancies: yes, absolutely. CCIE is the credential that signals "this person can design enterprise-scale networks without supervision." CCNP alone will not qualify you for architect roles in South Africa or globally. The investment ($2K exam cost + 500+ hours) is worth it for a $150K+/year career path.

Q: Can I skip CCIE and go straight to architect roles with just CCNP? Practically speaking, no. Hiring managers for architect roles expect CCIE. You might find a "Senior Network Engineer" role without CCIE, but true architect positions (with architect titles, architect compensation, and architecture responsibilities) almost universally require CCIE. CCNP gets you to Senior Engineer; CCIE gets you to Architect.

Template version: 2026-05-02 | Maintained by IT Career Roadmap | ZAR baseline: R18/$1 USD File naming: Career_Paths/CP11_Networking_Network_Architect.md