Principle Network Architect

Key Responsibilities● Own the network architecture standards and Building Block topology framework for the physicalsecurity estate, setting the designs the senior team builds against.● Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecturestandards and cable-cut survivability requirements for critical zones.● Establish network security and configuration standards, and the zero-touch-config automation strategythat governs deployment at scale.● Set monitoring, inventory and observability standards (NetBox, SolarWinds, PRTG, Syslog) for thenetwork estate.● Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendorselection across Cisco / Juniper / Arista.● Serve as the final escalation point for the most complex network incidents and architectural decisions.● Partner with the Infrastructure Engineering team and program leadership to align network architecturewith shared security boundaries, governance, SLAs and KPIs.● Author and approve network architecture standards, design documentation and runbooks; drivecontinuous improvement of resilience and security posture.● Mentor and develop senior network engineers, establishing best practices and building long-termnetwork engineering capability.Required Skills● 10+ years of enterprise network engineering, including architecture leadership and standardsownership in large or critical environments.● Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switchingand segmentation expertise.● Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, includingsurvivability strategy for critical zones.● Strong network automation and zero-touch-config leadership (Python / Ansible) and standardsdefinition.● Monitoring and inventory architecture (NetBox, SolarWinds, PRTG, Syslog); hardware / firmwarelifecycle and vendor management.● Demonstrated network architecture leadership — standards ownership, cross-functional partnership,mentoring and escalation leadership.● Certifications — Required: Cisco CCNP or Juniper JNCIS. Strongly preferred: CCIE or equivalentarchitect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL 4.Tools Required● Standards & Access: 802.1X, VLAN segmentation, DNS, DHCP for secure network access andsegmentation.● High-Availability Architecture: ERPS and MSTP ring topologies for perimeter resilience and cable-cut survivability.● Automation: zero-touch-config and scripting (Python / Ansible) for standardized, rapid deployment.● Monitoring & Vendors: NetBox, SolarWinds, PRTG and Syslog analysis; Cisco / Juniper / Aristaplatforms; hardware / firmware EOL refresh.