Network Architect

We are looking for an experienced Network Architect to design, optimize, and oversee our network and firewall infrastructure. This position will be responsible for ensuring our data, cloud, and security systems are scalable, reliable, and secure.

This is the deepest technical seat on the network team. It owns how the network is designed: corporate, data center, cloud, and the media networks that carry live content, and it leads the team that runs it. The lead responsibility is real but informal. There are no direct reports. This role leads through design authority, technical credibility, and follow-through. On a lean team it is also a working role: the architect writes the configs, joins the maintenance window, and handles escalation for any outages or issues, and mentors other engineers.

Depth is the point of this position. It is not a role for a generalist who reviews vendor diagrams. The successful candidate can defend a design decision under questioning, read a packet capture, and troubleshoot a problem at all hours. This role owns the architecture being right and the network staying up. This position will be the SME for all network and security infrastructure.

• Plan, design, and own the LAN,WAN,and hybrid onsite/cloud architecture. Provide a roadmap to keep architecture up to date and to encompass new technologies.
• Produce architect-grade documentation: designs with stated requirements, constraints, alternatives considered, failure modes, and a migration path. Not diagrams alone.
• Maintain IP/Vlan schemas and configuration standards.
• Set routing and switching standards — analyze traffic patterns, monitor network performance, and address any latency, network bottlenecks, or bandwidth issues.
• Design for measurable resilience: no single points of failure on network paths, and a documented, tested behavior for every failure path.
• Own capacity planning and technology lifecycle across the network; make the buy/refresh case with data.
• Evaluate platforms and vendors on technical merit and give management a defensible recommendation, including the option not to buy.
• Prepare project plans, budget estimates, and resources needed for any infrastructure deployments.
• Technical peer to partner with other teams for operational or engineering needs.

• Own Palo Alto firewall architecture: PAN-OS platform design, Panorama management, App-/User-y model, decryption strategy, HA design, URL filtering, AI security, and geo-location firewall rules.
• Own remote access and edge architecture — Global Protect, ZTNA/SASE direction, internet edge, and cloud connectivity.
• Design segmentation and east-west controls, including microsegmentation strategy for the data center.
• Ensure logging and flow visibility reach network monitoring and security tools.
• Keep abreast of new URL categories, technologies, and vulnerabilities. Make recommendations where needed for upgrades, changes, new licenses, or new technologies.

• Own the operational health of the network day to day: monitoring, alerting, incident queue, change quality, code upgrades, policies, and procedures.
• Set the engineering standards the team builds to; review every significant change before implementation.
• Own change planning and maintenance windows in a 24x7 environment — pre-checks, rollback, post-change validation, and coordination with on-air schedules.
• Serve as the top escalation point for network incidents and lead technical bridge calls.
• Own the postmortem and drive corrective actions to closure.
• Mentor engineers and grow the bench so the team is not single-threaded.
• Coordinate with other business-unit technologists on shared work:…