Network Architect

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

• Lead technical discovery and current-state assessments across facilities, newly integrated businesses, and other enterprise environments.
• Document network topologies, circuits, routing, switching, wireless infrastructure, firewalls, VPNs, VLANs, IP addressing, segmentation, DNS/DHCP, monitoring, and key dependencies.
• Identify architectural inconsistencies, undocumented infrastructure, single points of failure, capacity constraints, security risks, technical debt, and lifecycle concerns.
• Develop current-state and target-state diagrams, gap assessments, remediation plans, migration strategies, and technical recommendations.
• Design secure and highly available LAN, WAN, wireless, SD-WAN, internet edge, VPN, remote access, routing, switching, segmentation, and related network architectures.
• Establish enterprise network standards, reference architectures, configuration patterns, engineering practices, and technology roadmaps.
• Produce high-level and low-level designs, logical and physical diagrams, implementation plans, bills of material, addressing strategies, VLAN/VRF designs, routing models, and resiliency plans.
• Lead hands-on engineering activities for network builds, site activations, office expansions, technology refreshes, migrations, and acquisition integrations.
• Design and support the transition of legacy or independently operated networks into standardized enterprise architectures while minimizing operational disruption.
• Coordinate circuit provisioning, carrier connectivity, hardware deployment, configuration, cutover, validation, and testing.
• Validate routing, redundancy, failover, segmentation, security controls, application connectivity, and network performance after implementation.
• Develop repeatable deployment templates, automation, and implementation methods to improve consistency and delivery speed.
• Partner with cybersecurity teams to incorporate Zero Trust, segmentation, access control, secure remote access, logging, and least-privilege principles.
• Design solutions that support CMMC, CUI, ITAR/EAR, government, and other applicable regulatory and contractual requirements.
• Serve as a senior escalation point for complex network engineering and architecture issues and lead root-cause analysis for significant incidents.
• Provide technical guidance and mentorship to Network Engineers and infrastructure personnel without requiring direct people management.
• Collaborate with Network Engineering, Infrastructure, Cybersecurity, Cloud, IT Operations, application teams, vendors, carriers, and managed service providers.
• Maintain accurate as-built documentation and ensure completed projects transition effectively into operational support.

Requirements:

• Approximately 8+ years of progressive enterprise networking experience, including substantial senior-level network engineering and/or architecture responsibilities.
• Expert-level knowledge of enterprise routing and switching, LAN/WAN, wireless, firewalls, VPN, internet connectivity, DNS/DHCP, IP addressing, network segmentation, and network monitoring.
• Strong understanding of enterprise routing and design principles, including BGP, OSPF, redundancy, high availability, QoS, and resilient network architecture.
• Demonstrated experience designing and implementing networks across multiple geographically distributed locations.
• Proven experience conducting network discovery and current-state assessments and developing architectures, modernization plans, migrations, implementations, and operational handoffs.
• Ability to take complex projects from business or technical requirements through architecture, detailed engineering, implementation, testing, and transition to operations.
• Strong troubleshooting and root-cause analysis skills across multiple networking and infrastructure domains.
• Ability to produce professional network diagrams, architecture documentation, implementation plans, standards, and technical recommendations.
• Strong written and verbal communication skills, with the ability to work effectively with technical teams, leadership, vendors, and business stakeholders.
• U.S. Person status as required for applicable ITAR and export-controlled work.
• Active TS / Top Secret clearance with SCI eligibility or TS/SCI required upon hire.
• Experience in aerospace, defense, government, advanced manufacturing, or other highly regulated environments is preferred.
• Experience integrating networks following acquisitions, mergers, new facility launches, or consolidation of independently operated business units is preferred.
• Hands-on experience with technologies from Cisco, Palo Alto, Fortinet, Aruba, Juniper, Meraki, Zscaler, or comparable vendors is preferred.
• Experience with SD-WAN, network access control, enterprise IPAM/DNS/DHCP, cloud networking, and hybrid connectivity is preferred.
• Experience with Microsoft Azure, Azure Government, GCC High, or other secure cloud and collaboration environments is a plus.
• Knowledge of network automation, configuration templates, APIs, scripting, infrastructure-as-code, or automated documentation is a plus.
• Relevant certifications such as CCNP, CCIE, JNCIP, PCNSE, Security+, CISSP, or comparable credentials are a plus.

Benefits:

• Base salary range of $170,000–$190,000, depending on experience, skills, and location.
• Flexible Time Off (FTO) to support work-life balance and personal needs.
• Comprehensive medical, dental, and vision coverage for employees and families.
• Significant employer contribution toward healthcare premiums, with many employee benefits paid at 100%.
• Flexible and affordable gym membership options with access to more than 12,700 locations nationwide.
• 401(k) retirement plan with a 50% company match on contributions up to 8%.
• Company wellness programs supporting physical and mental well-being.
• Additional voluntary benefits and employee support resources.
• Remote work within the United States.
• Opportunity to work with a highly skilled team in an innovative, mission-driven environment.