> Markdown version of [/jobs/ext/1399810-network-architect](https://www.wearedevelopers.com/jobs/ext/1399810-network-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Architect - **Company:** HTC Global Services, Inc. - **Location:** Buffalo, NY, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Automation of Tests, Bash Shell, Border Gateway Protocol, Cisco IOS, Configuration Management Databases, Complex Networks, System Configuration, Data Centers, Network Address Translation, EtherChannel, Firmware, Monitoring of Systems, Networking Hardware, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Internet Service Provider, Python (Programming Language), Network Security, Network Diagrams, Network Planning and Design, Routing, Network Segmentation, Packet Analyzer, Cisco Nexus Switches, Open Shortest Path First (OSPF), Performance Tuning, Runbook, Simple Network Management Protocols, Syslog, Systems Integration, Traffic Analysis, Wireshark, Virtual Local Area Networks, Wide Area Networks, Scripting, Identity Services Engine, Nx-os, Amazon Virtual Private Cloud (VPC), SolarWinds (Software), Network Support, Palo Alto Networks, Fortinet, Firewall Services Module, Cisco, Servicenow - **Published:** July 23, 2026 - **Apply:** https://www.juju.com/job/00000000gin9ya ## About the Role + 10-12 years of networking experience, including 3-4 years in an L3 or Architect-level role. + Extensive hands-on experience with Cisco IOS/XE and NX-OS. + Strong expertise in routing (OSPF, BGP) and switching (VLANs, STP, EtherChannel). + Experience with Fortinet FortiGate (FortiOS) and Palo Alto Networks firewalls. + Experience with HA cluster configuration. + Experience with SD-WAN posture, security fabric maturity, VPNs, and threat prevention profile alignment. + Senior-level experience with Cisco Nexus 9000/7000/5000 series, NX-OS upgrades, VPC, VXLAN/EVPN, FEX topologies, out-of-band management, and greenfield rack builds. + Strong experience with Meraki wireless. + Experience with Cisco DNaC and Cisco ISE. + Solid understanding of network security, VPNs, QoS, and network segmentation. + Experience with NMS/SNMP monitoring, Syslog, and packet capture tools. + Working knowledge of automation and scripting using Python, Bash, and EEM. + Experience configuring SolarWinds and other monitoring tools. + Experience performing network discovery. + CCNA or equivalent hands-on experience (required). + CCNP Enterprise (strongly preferred). + Fortinet NSE 4 or higher (preferred). + ITIL v4 Foundation (optional). + Strong analytical and structured troubleshooting approach. + Excellent communication during high-severity incidents. + Proactive, detail-oriented, automation-focused, and collaborative mindset. + Ability to mentor junior engineers. + Ability to perform occasional lifting of network equipment (up to 50 lbs), if required. ## Description HTC Global Services is seeking an experienced Lead Network Support Engineer (L3) to provide advanced technical leadership and serve as the final escalation point for complex network issues. This role includes network assessments, architecture support, firewall management, performance optimization, automation, and mentoring junior engineers. The engineer will be a core member of the assessment delivery team and transition into a lead technical role supporting the client's transformation from an SOP-based operating model to a self-healing infrastructure model., + Assess FortiGate deployments, including FortiOS version currency, FortiManager/FortiAnalyzer integration, HA cluster configuration, SD-WAN posture, security fabric maturity, VPNs, and threat prevention profile alignment. + Assess Palo Alto Networks deployments, including PAN-OS version currency, Panorama management, HA configuration, GlobalProtect VPN posture, App-ID/User-ID/Content-ID adoption, WildFire integration, and security policy layering. + Review firewall change control processes, rule review cadence, and rulebase governance. + Lead data center switching assessments across Cisco Nexus and Arista environments, including spine-leaf, VPC, MLAG, EVPN-VXLAN, rack build standards, cabling, capacity analysis, out-of-band management, and software version currency. + Lead reviews of perimeter and network security controls, including firewall rule analysis, policy hygiene, security profiles, and configuration standardization. + Support risk register development and 30-60-90-day remediation roadmaps. + Develop standardized configuration templates and practice standards for switches, firewalls, network additions, rack builds, and change activities. + Contribute to hardware lifecycle, firmware/software currency, and end-of-life/end-of-support reviews. + Configure and work with SolarWinds and other monitoring tools. + Perform network discovery activities. + Apply knowledge of data center design patterns, including spine-leaf topology, ECMP, jumbo frames, storage traffic isolation, and out-of-band management. + Act as the final L3 escalation point for complex network issues involving QoS, OSPF, BGP, VLANs, STP, port channels, NAT, ACLs, and VPNs. + Perform packet and traffic analysis using Wireshark, FortiAnalyzer, Syslog, and related tools. + Lead P1/P2 incident bridge calls, perform root cause analysis, and drive issue resolution. + Support network discovery and CMDB tooling, including Device42, Lansweeper, ServiceNow Discovery, SolarWinds, or comparable platforms. + Operate within a ServiceNow ITSM environment, supporting incident, change, problem, and CMDB workflows. + Contribute to and review high-level and low-level network designs for new sites, migrations, segmentation initiatives, and firewall architectures. + Validate network designs for scalability, security, and adherence to enterprise standards. + Recommend improvements across routing, switching, wireless, and security environments. + Manage and optimize Fortinet FortiGate environments, including policies, NAT, UTM profiles, VPNs, routing, and HA. + Audit firewall rules for least-privilege access and compliance. + Support segmentation, hardening, and compliance initiatives. + Perform capacity planning, traffic analysis, performance tuning, and proactive network health monitoring. + Develop and maintain automation scripts using Python, Bash, and EEM. + Automate configuration backups, compliance checks, and monitoring integrations. + Lead network changes, upgrades, firewall migrations, and routing redesigns. + Prepare RFCs, rollback plans, risk assessments, and post-change reports. + Coordinate with application, infrastructure, security, and ISP teams. + Work with ISPs and OEMs, including Cisco and Fortinet, on escalations, TAC cases, and hardware issues. + Validate circuit performance and support last-mile troubleshooting. + Maintain network diagrams, SOPs, configuration standards, and runbooks. + Improve L1/L2 documentation and operational processes. + Mentor L1/L2 engineers and contribute to training, standards, and continuous improvement initiatives. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) ## Related Articles - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Basic And Advanced Networking in Dart and Flutter](https://www.wearedevelopers.com/magazine/112-basic-and-advanced-networking-in-dart-and-flutter) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)