Senior Architect

• Define the architectural vision and solution supporting strategic business outcomes for products and services
• Define the target operating environment, design for client resiliency, assist with solution design, and define non-functional requirements
• Design DMZ network projects with focus on SASE and cloud designs
• Provide DMZ, remote access, SD-WAN, hosting, B2B, VPN, and ISP infrastructure architecture across DMZ zones
• Create network-level high-level and low-level designs and support solution delivery
• Assess design submissions for security compliance against baselines
• Guide requestors through technical challenges until designs are complete
• Liaise between Global Information Security and engineering/operations as an escalation point
• Lead projects, troubleshoot multivendor solutions in lab or proof-of-concept environments, and manage networking projects and deployments
• Create solution intent and architectural vision for complex solutions across business, operations, and technology
• Contribute to architecture roadmaps, best practices, and standardized templates
• Clarify architecture, assist with system design, and provide solution options for architectural impediments
• Facilitate solution-driven discussions and lead complex architecture designs using practical experiments and proof of concepts
• Educate team members on technology practices, standardization strategies, and best practices
• Support technology-stack and product selection
• Perform design and code reviews to ensure security, performance, maintainability, scalability, usability, and reliability requirements are met

• 10+ years industry experience with technology domain experience
• Experience integrating solutions with cloud provider environments such as MS Azure, AWS, Google, and IBM
• Strong understanding of network security architecture and traffic segmentation
• Working knowledge of public cloud networking concepts within GCP, AWS, and Azure environments
• Solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router and DMZ/ISP experience
• Solid understanding of TCP/IP, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise-level MPLS, VDC, VPC, and SDN
• Ability to utilize DDoS tools including Arbor, Prolexic/Akamai, and F5/Silverline for application-layer, TCP state table, and bandwidth DDoS mitigations
• Familiarity with installing and deploying Arista and Cisco routing and switching platforms including ISR, ASR, Catalyst, and Nexus
• Experience with large-scale, complex network/DMZ environments and authentication mechanisms such as Active Directory and Ping Federate
• Experience with scripting languages
• Experience with Google Cloud Platform, AWS, and Microsoft Azure enterprise network integration
• Understanding of Cloud Interconnect, Direct Connect, and Express Route
• Site-to-site VPN architecture experience
• Experience testing with Quali Cloud Shell and Viavi Tera VM
• General experience with firewalls, intrusion detection, and threat mitigation
• Exposure to EOS and IOS-XR routing
• IPv6 knowledge/experience to support certification testing
• Experience with automation and development of automation scripts
• Python experience
• Experience with Arista Cloud Vision, Terraform, Ansible, Netconf, and YANG

Demonstrates extensive experience in network architecture and security, with a strong focus on cloud integration and complex DMZ environments. Proficient in leading projects, designing resilient solutions, and ensuring compliance with security standards.

• Network Security Architecture
• Cloud Integration (AWS, Azure, GCP)
• Routing and Switching (Cisco, Arista)
• DDoS Mitigation Tools (Arbor, F5)
• Scripting (Python)

• Network Design
• TCP/IP
• SD-WAN
• BGP
• OSPF
• VLAN
• IPSEC
• Automation Scripting
• DMZ Architecture
• VPN Architecture

• Project Leadership
• Technical Guidance
• Collaboration
• Problem Solving
• Education and Mentoring

• Cloud Networking
• Security Compliance
• Traffic Segmentation
• Intrusion Detection
• Threat Mitigation

• Arista Cloud Vision
• Terraform
• Ansible
• Quali Cloud Shell
• Viavi Tera VM