> Markdown version of [/jobs/ext/3845790-network-architect](https://www.wearedevelopers.com/jobs/ext/3845790-network-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Network Architect

- **Company:** Pattern Energy
- **Location:** Houston, TX, United States
- **Experience:** Expert
- **Salary:** $111,000.0 - $139,000.0
- **Contract:** Permanent contract
- **Skills:** Border Gateway Protocol, Complex Networks, Cyber Security, Computer Networks, Data Centers, Network Address Translation, Disaster Recovery, Supervisory Control and Data Acquisition (SCADA), Network Architecture, Network Segmentation, Open Shortest Path First (OSPF), Virtual Local Area Networks, Wide Area Networks, Dynamic Routing, Information Technology, Operational Systems, Fortinet
- **Published:** October 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=1e67426ada5f9750

## About the Role

Bachelor's degree in computer science, Network Engineering, or a related technical field, or equivalent work experience. 8-10 years of progressive experience designing and supporting enterprise network and security infrastructure, with deep, hands-on expertise in Palo Alto and Fortigate firewall platforms (including Panorama and Fortimanager), SD-WAN architecture, dynamic routing protocols (BGP, OSPF), NAT design, and network segmentation. Direct experience with NERC CIP compliance and OT/ICS/SCADA network environments strongly preferred. Relevant certifications such as PCNSE, Fortinet NSE, or CCNP are a plus.

## Description

The Network Architect is responsible for designing, implementing, and maintaining secure, resilient, and scalable network infrastructure across both corporate IT and Operational Technology (OT) environments. This includes leading firewall architecture (Palo Alto and Fortigate), SD-WAN, dynamic routing, network segmentation, and NAT design, while ensuring the network's security posture meets NERC CIP compliance requirements. This position plays a critical role in protecting generation, substation, and SCADA environments while enabling reliable connectivity across the enterprise.
Key Accountabilities

 * Design, deploy, and maintain enterprise firewall architecture across Palo Alto and Fortigate platforms, including policy standardization and rule-base optimization
 * Architect and manage SD-WAN fabric across corporate and OT sites, including transport selection, path steering policies, and failover design
 * Design and maintain dynamic routing (BGP/OSPF) across the WAN, data center, and OT environments to ensure resilient, redundant connectivity
 * Own network segmentation strategy (VLANs, zones, micro-segmentation) separating IT, OT, and DMZ environments per Purdue Model best practices
 * Lead NERC CIP compliance efforts for network infrastructure, including Electronic Security Perimeter (ESP) design, access controls, and audit evidence support
 * Design and support OT network infrastructure connecting SCADA, substations, and generation sites, ensuring reliability and security
 * Serve as escalation point for complex network, firewall, and routing incidents; lead root-cause analysis
 * Maintain network architecture documentation, standards, and disaster recovery/failover runbooks