Network Architect in Berkeley Heights

Energy Jobline

Berkeley Heights, NJ, United States

11 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

8 years minimum

Working hours

Regular working hours

Job source

www.energyjobline.com

Tech stack

Border Gateway Protocol Cloud Computing Cyber Security Data Centers Dynamic Host Configuration Protocol Domain Name System (DNS) NetFlow Network Architecture Network Planning and Design Routing Network Segmentation Network Administration

+11 more

Cisco Nexus Switches Open Shortest Path First (OSPF) Public Key Infrastructure Security Information and Event Management Simple Network Management Protocols Terminal Access Controller Access-Control System (TACACS) Virtual Local Area Networks Network Switches Load Balancing System Availability Juniper

Job description

We are seeking a Network Architect to lead network design and technical delivery for a new data center (primary/secondary). This role partners with security, computer, storage, backup/DR, and facilities teams to implement a production-grade network that supports critical workloads, tight security controls, and predictable operations. The architect owns the network target state, standards, configurations, testing, and migration/cutover governance., n \n

Network Architecture & Strategy: Define target-state DC network architecture including fabric design, routing strategy, segmentation model, and operational standards aligned to resiliency and security requirements. \n
Data Center Fabric: Architect and guide implementation of leaf-spine with EVPN/VXLAN and/or Cisco ACI (or equivalent); define underlay/overlay, BGP, MTU/jumbo frames, and control-plane protections. \n
Segmentation & Security Zones: Design VRF/VLAN strategy, micro-segmentation alignment (where applicable), east-west controls, firewall placement, and north-south security boundaries in coordination with InfoSec. \n
DC Interconnect (DCI) & WAN Edge: Design DCI between DC1/DC2, connectivity to WAN/Internet/cloud, redundancy, QoS, and routing policy (BGP/OSPF as required). \n
Core Network Services: Own integration patterns for DNS/DHCP/IPAM (Infoblox or equivalent), NTP, PKI/cert dependencies, TACACS/RADIUS, and network management. \n
Load Balancing & Traffic Services: Partner on L4-L7 design (e.g., F5 or equivalent), VIP standards, failover, and integration with security zones. \n
Observability & Operations: Define monitoring/telemetry (SNMP/streaming telemetry), syslog/SIEM integration, NetFlow/IPFIX, alerting standards, and operational runbooks. \n
Implementation Governance: Validate BOMs and vendor designs, lead build MOPs, configuration standards, peer reviews, and testing/acceptance criteria. \n
Migration & Cutover Support: Create cutover plans for network moves (routing changes, VLAN extensions, DCI cutovers), rollback procedures, and validation checklists; support window change. \n
Documentation & Standards: Maintain network HLD/LLD, diagrams, IP plans, naming conventions, port maps, and “as-built” documentation. \n

Requirements

8-12+ years in enterprise network architecture with delivery leadership in new DC builds or major network transformations. \n
Deep expertise in DC networking concepts: BGP, EVPN/VXLAN, leaf-spine, routing policy, redundancy, and high availability design. \n
Strong experience with segmentation: VRFs/VLANs, security zoning, and firewall integration. \n
Proven ability to produce HLD/LLD, standards, MOPs, and operational runbooks. \n
Strong stakeholder leadership across security, compute, storage, and facilities with clear communication and decision-making. \n, * Experience with Cisco ACI, Nexus/Arista/Juniper fabrics, and multi-DC DCI patterns. \n
Exposure to Palo Alto (or equivalent firewalls) and F5 (or equivalent load balancers). \n
Familiarity with regulated environments (banking/healthcare) and audit-ready operational controls. \n