Principle Network Architect

Key Responsibilities Own the network architecture standards and Building Block topology framework for the physical security estate, setting the designs the senior team builds against. Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecture standards and cable-cut survivability requirements for critical zones. Establish network security and configuration standards, and the zero-touch-config automation strategy that governs deployment  monitoring, inventory and observability standards (Net Box, Solar Winds, PRTG, Syslog) for the network estate.

Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendor selection across Cisco / Juniper / Arista. Serve as the final escalation point for the most complex network incidents and architectural decisions. Partner with the Infrastructure Engineering team and program leadership to align network architecture with shared security boundaries, governance, SLAs and KPIs. Author and approve network architecture standards, design documentation and runbooks;

drive continuous improvement of resilience and security posture. Mentor and develop senior network engineers, establishing best practices and building long-term network engineering capability.

Required Skills 10+ years of enterprise network engineering, including architecture leadership and standardsownership in large or critical environments. Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switching and segmentation expertise. Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, includingsurvivability strategy for critical zones. Strong network automation and zero-touch-config leadership (Python / Ansible) and standardsdefinition.

Monitoring and inventory architecture (Net Box, Solar Winds, PRTG, Syslog); hardware / firmwarelifecycle and vendor management. Demonstrated network architecture leadership — standards ownership, cross-functional partnership,mentoring and escalation leadership. Certifications —

Required:

Cisco CCNP or Juniper JNCIS. Strongly preferred: CCIE or equivalentarchitect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL
4.Tools Required Standards & Access: 802.1X, VLAN segmentation, DNS, DHCP for secure network access and segmentation. High-Availability Architecture: ERPS and MSTP ring topologies for perimeter resilience and cable-cut survivability. Automation: zero-touch-config and scripting (Python / Ansible) for standardized, rapid deployment. Monitoring & Vendors:
Net Box, Solar Winds, PRTG and Syslog analysis;
Cisco / Juniper / Aristaplatforms; hardware / firmware EOL refresh.

Salary Range $54.81 - $86.54 USD (Hourly)
Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.

Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

Astreya offers comprehensive benefits to all Regular, Full-Time Employees,including:

Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees…