Network Architect

The Network Architect is the senior-most technical role within the Network Infrastructure group and serves as the lead authority on network architecture, design standards, and future-state planning. Under the direction of the IT Network Support Manager, this position is responsible for developing scalable, secure, and resilient network solutions across on-premises, cloud, and operational technology environments.

The Architect collaborates closely with infrastructure and security teams, cloud architects, and external vendors to ensure alignment between business needs and technical solutions. This role provides technical mentorship to Network Administrators and contributes to the development of policies, design standards, and automation strategies—but does not carry supervisory authority. Presents recommendations to the IT Network Support Manager for approvals.

The Network Architect is expected to lead by influence, contribute to strategic initiatives, and act as the escalation point for the most complex network design and troubleshooting scenarios. Blends strong technical expertise with excellent communication and collaborative skills to help shape the agency’s long-term network vision.

EDUCATION/TRAINING

Bachelor’s degree in Computer Science, Information Systems, or a related field (Master’s preferred).

Technical certifications and relevant work experience may be considered in lieu of formal academic degrees.

• Certification Preferred:
  • Cisco Certified Network Associate (CCNA) or Professional (CCNP)
  • Palo Alto Networks Certified Cybersecurity Associate (PCCSA) or similar
  • Azure Network Engineer Associate
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)
  • Cisco Certified Internetwork Expert (CCIE)
  • Certified Information Systems Security Professional (CISSP)

EXPERIENCE

• Nine (9+) years of experience in enterprise network administration, engineering, or architecture roles
• Two (2) years in a senior or lead-level capacity.
• Experience supporting LAN/WAN architecture, including routing protocols such as OSPF and BGP.
• Experience in multi-site environments and basic troubleshooting of Layer 2 and Layer 3 network issues.
• Familiarity with hybrid network environments (on-prem/cloud) and firewall platforms is preferred.
• Exposure to operational networks (OT), radio or wireless technologies is a plus, but not required.

KNOWLEDGE/SKILLS/ABILITIES:

• Solid experience with Layer 2 and Layer 3 networking, including OSPF and BGP routing protocols, and core switching concepts such as Spanning Tree.
• Familiarity with Cisco networking platforms (e.g., IOS, Catalyst switches, Wireless Controllers).
• Basic understanding of DHCP, DNS, and IP address management.
• Preferred:
  • Experience with tools like Cisco ISE, Catalyst Center, and network automation platforms (e.g., Cisco ACI, Python, or SD-WAN).
  • Familiarity with hybrid infrastructure including Azure, segmented DMZs, or Operational Technology (OT) networks.
• Familiarity with Azure cloud networking, including VNETs, Express Route, VPN Gateways, and private endpoints.
• Understanding of cloud-hybrid architectures and virtual network appliances like Cisco CSR 1000v and Palo Alto VM-Series firewalls.
• Firewall and Security Architecture:
  • Proficiency with Palo Alto enhanced features like App-, User-, Content-, and SSL decryption.
  • Experience with Panorama for centralized management and threat prevention using Wild Fire and DNS Security.
  • Working knowledge of NIST and CIS frameworks, including network segmentation, privileged access management (PIM), AAA, and Zero Trust security standards.
  • Layer 2 security protocols such as IP dhcp snooping, ip arp validation, and access-lists
  • Authentication, and identity management systems such as Cisco ISE, and Active directory
  • Network principles for IDS and IPS systems using tools such as Gigamon
• Network Automation:
  • Knowledge of Cisco DNA automation using templates, and workflows
  • Automation Platforms such as Terra, puppet, and Chef
  • Understanding, and experience with .net, C++, and Python
• Network Performance and Monitoring:
  • Strong experience in network performance analysis and capacity planning.
  • Proficiency with monitoring tools such as Solar Winds, PRTG,…