Job Description
Key Responsibilities
\n
● Own the network architecture standards and Building Block topology framework for the physical
\n
security estate, setting the designs the senior team builds against.
\n
● Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecture
\n
standards and cable-cut survivability requirements for critical zones.
\n
● Establish network security and configuration standards, and the zero-touch-config automation strategy
\n
that governs deployment at scale.
\n
● Set monitoring, inventory and observability standards (NetBox, SolarWinds, PRTG, Syslog) for the
\n
network estate.
\n
● Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendor
\n
selection across Cisco / Juniper / Arista.
\n
● Serve as the final escalation point for the most complex network incidents and architectural decisions.
\n
● Partner with the Infrastructure Engineering team and program leadership to align network architecture
\n
with shared security boundaries, governance, SLAs and KPIs.
\n
● Author and approve network architecture standards, design documentation and runbooks; drive
\n
continuous improvement of resilience and security posture.
\n
● Mentor and develop senior network engineers, establishing best practices and building long-term
\n
network engineering capability.
\n
Required Skills
\n
● 10+ years of enterprise network engineering, including architecture leadership and standards
\n
ownership in large or critical environments.
\n
● Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switching
\n
and segmentation expertise.
\n
● Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, including
\n
survivability strategy for critical zones.
\n
● Strong network automation and zero-touch-config leadership (Python / Ansible) and standards
\n
definition.
\n
● Monitoring and inventory architecture (NetBox, SolarWinds, PRTG, Syslog); hardware / firmware
\n
lifecycle and vendor management.
\n
● Demonstrated network architecture leadership — standards ownership, cross-functional partnership,
\n
mentoring and escalation leadership.
\n
● Certifications — Required: Cisco CCNP or Juniper JNCIS. Strongly preferred: CCIE or equivalent
\n
architect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL 4.
\n
Tools Required
\n
● Standards & Access: 802.1X, VLAN segmentation, DNS, DHCP for secure network access and
\n
segmentation.
\n
● High-Availability Architecture: ERPS and MSTP ring topologies for perimeter resilience and cable-
\n
cut survivability.
\n
● Automation: zero-touch-config and scripting (Python / Ansible) for standardized, rapid deployment.
\n
● Monitoring & Vendors: NetBox, SolarWinds, PRTG and Syslog analysis; Cisco / Juniper / Arista
\n
platforms; hardware / firmware EOL refresh.