Principle Network Architect

• Own the network architecture standards and Building Block topology framework for the physical security estate, setting the designs the senior team builds against.
• Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecture standards and cable-cut survivability requirements for critical zones.
• Establish network security and configuration standards, and the zero-touch-config automation strategy that governs deployment at scale.
• Set monitoring, inventory and observability standards (Net Box, Solar Winds, PRTG, Syslog) for the network estate.
• Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendor selection across Cisco / Juniper / Arista.
• Serve as the final escalation point for the most complex network incidents and architectural decisions.
• Partner with the Infrastructure Engineering team and program leadership to align network architecture with shared security boundaries, governance, SLAs and KPIs.
• Author and approve network architecture standards, design documentation and runbooks; drive continuous improvement of resilience and security posture.
• Mentor and develop senior network engineers, establishing best practices and building long-term network engineering capability.

• 10+ years of enterprise network engineering, including architecture leadership and standards ownership in large or critical environments.
• Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switching and segmentation expertise.
• Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, including survivability strategy for critical zones.
• Strong network automation and zero-touch-config leadership (Python / Ansible) and standards definition.
• Monitoring and inventory architecture (Net Box, Solar Winds, PRTG, Syslog); hardware / firmware lifecycle and vendor management.
• Demonstrated network architecture leadership — standards ownership, cross-functional partnership, mentoring and escalation leadership.
• Certifications —
  
  Required:
  
  Cisco CCNP or Juniper JNCIS. Strongly preferred: CCIE or equivalent architect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL 4.

• Standards & Access: 802.1X, VLAN segmentation, DNS, DHCP for secure network access and segmentation.
• High-Availability Architecture: ERPS and MSTP ring topologies for perimeter resilience and cable-cut survivability.
• Automation: zero-touch-config and scripting (Python / Ansible) for standardized, rapid deployment.
• Monitoring & Vendors:
  Net Box, Solar Winds, PRTG and Syslog analysis;
  Cisco / Juniper / Arista platforms; hardware / firmware EOL refresh.

Salary Range $54.81 - $86.54 USD (Hourly) Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.

Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

• Medical provided through UHC (PPO, HSA, Surest options)
• Medical provided through Kaiser (HMO option only) for California employees only
• Dental provided through UHC Nationwide
• Vision provided by…